A proxyjacking campaign is looking for vulnerable SSH servers

A researcher at Akamai has highlighted a new cybercriminal campaign called proxyjacking, where cybercriminals are exploiting vulnerable SSH servers to rent out compromised systems and sell bandwidth to proxy services. The criminals utilize legitimate services like Peer2Profit and Honeygain, which do not sufficiently vet the origins of shared bandwidth. The attack is fileless, uses legitimate software like curl and Docker, and is less likely to be detected compared to cryptojacking. Protection strategies include keeping systems and software updated, using strong passwords, monitoring network traffic, tracking containerized applications, and implementing key-based authentication for SSH