OMIGOD: Microsoft Azure VMs Exploited to Drop Mirai, Miners

Share post:

Researchers have found that threat actors exploit Azure OMIGOD, a group of four vulnerabilities in the Open Management Infrastructure (OMI) that provide scope for privilege escalation and remote code execution.

Wiz researchers who first discovered the bugs noted that they may affect thousands of Azure customers and millions of endpoints.

The first attacks were discovered by security researchers, who showed that a Mirai botnet was behind some of the exploit attempts against Azure Linux OMI endpoints, which are vulnerable to CVE-2021-38647 RCE exploits.

In analyzing the botnet, digital forensics company Cado Security noted that it “also closes the ports of the vulnerabilities it exploited to stop other botnets taking over the system.”

Among the steps customers should take to mitigate the risk, Microsoft said: “While updates are being rolled out using safe deployment practices, customers can protect against the RCE vulnerability by ensuring VMs are deployed within a Network Security Group (NSG) or behind a perimeter firewall and restrict access to Linux systems that expose the OMI ports (TCP 5985, 5986, and 1207).”

For more information, read the original story in Bleeping Computer.



Related articles

Socket develops tool to protect developers from npm vulnerabilities

Socket, a security firm, has created a new method for protecting developers from the flaws in npm, GitHub's...

Google spots vulnerabilities in Exynos chips that could affect Androids

Google is urging Android phone owners, such as those who own Samsung, Pixel, or Vivo phones, to take...

Orlando Family Physicians agrees to settle clients affected by data breach

Orlando Family Physicians (OFP) has reached a class action settlement to resolve claims stemming from a 2021 healthcare...

FBI arrests alleged head of BreachForums criminal market

Man arrested in New York state is believed to have run one of the biggest criminal forums in

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways