The Node.js-based blogging platform Ghost is the latest victim in an ongoing hacking campaign that has already hit tens of companies.
Hackers have been scanning the internet for servers running the software Salt which is used by businesses to manage and automate their servers inside data centers, cloud server clusters and enterprise networks. This is because two recently-patched bugs in the software can be exploited to gain access to Salt servers.
- Nearly $10bn worth of cryptocurrency was stolen in the past three years
- Hackers siphon millions in cryptocurrency from dForce exchange
- These are the best blogging sites
According to Ghost's developers, the hackers exploited the authentication bypass CVE-2020-11651 and directory traversal CVE-2020-11652 to take control over the company's Salt master server.
However, they did not steal any financial information or user credentials from the company while they had access to the Ghost (Pro) site and Ghost.org billing services. Instead, the hackers installed a cryptocurrency miner on Ghost's servers just as they did to LineageOS.
This cryptocurrency miner is what alerted Ghost to the hack in the first place as the mining attempt spiked the company's CPUs and quickly overloaded most of its systems.
In a status page, the Ghost developer team explained that it has successfully recovered from the hack, saying:
“All traces of the crypto-mining virus were successfully eliminated yesterday, all systems remain stable, and we have not discovered any further concerns or issues on our network. The team is now working hard on remediation to clean and rebuild our entire network.”
- We've also highlighted the best website builder
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.