Denonia Malware Shows Evolving Cloud Threats

[MuzzMelbourne]

Content source

https://www.darkreading.com/omdia/denonia-malware-shows-evolving-cloud-threats

One of the more important points to get across when addressing cloud security is to make it clear to all involved that cloud security is not only different, but that it keeps evolving. If security professionals needed a reminder of this, they need to look no further than the recent discovery of Denonia, a cryptominer that operates in serverless environments.

Denonia Malware Shows Evolving Cloud Threats

Cloud security is constantly evolving and consistently different than defending on-premises assets. Denonia, a recently discovered serverless cryptominer drives home the point.

www.darkreading.com

 

[upnorth]

Using DoH is a fairly unusual choice for the Denonia authors, but provides two advantages here:

• AWS cannot see the dns lookups for the malicious domain, reducing the likelihood of triggering a detection

Cado Discovers Denonia: The First Malware Specifically Targeting Lambda - Cado Security | Cloud Forensics & Incident Response

As part of ongoing research, we found the first publicly-known case of malware specifically designed to execute in an AWS Lambda environment.

www.cadosecurity.com