Lucifer Botnet Exploits Apache Hadoop & Druid (CVE-2021-25646) for Cryptomining

Security researchers at Aqua Nautilus have uncovered a sophisticated campaign exploiting misconfigurations and vulnerabilities in Apache Hadoop and Apache Druid. This campaign leverages a potent variant of the Lucifer DDoS botnet with observed evolutions,...