VERY IMPORTANT

Researchers at Cado Security recently discovered a new malware campaign targeting Asian Cloud Service Providers (CSPs). This malware, which we’ve since named CoinStomp, is comprised of a family of shell scripts that attempt to exploit cloud compute instances hosted by these CSPs for the purpose of mining cryptocurrency. While this form of cryptojacking attack is commonplace these days, CoinStomp makes use of some interesting techniques and even references a prior campaign.