![Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining](https://search.ai.wiki/wp-content/uploads/2023/05/cybercriminals-targeting-apache-nifi-instances-for-cryptocurrency-mining.jpg)
Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining
A financially motivated threat actor is actively scouring the internet for unprotected Apache NiFi instances to covertly install a cryptocurrency miner and facilitate lateral movement.
The findings come from the SANS Internet Storm Center (ISC), which detected a spike in HTTP requests for “/nifi” on May 19, 2023.
“Persistence is achieved via timed processors or entries to cron,” said Dr.