Threat investigators have revealed two distinct malware operations that have exploited vulnerabilities and misconfigurations within cloud settings to disseminate cryptocurrency mining software.
The clusters of threat activity have been designated as Soco404 and Koske by the cloud security companies Wiz and Aqua, respectively.
Soco404 “attacks both Linux and Windows platforms, implementing malware tailored to each system,” Wiz