Since the beginning of February 2023, the first-ever illegal cryptocurrency mining operation has been uncovered by cybersecurity researchers. The change represents a significant departure from Monero, a popular cryptocurrency utilised in such campaigns. It’s believed that Dero “offers higher payouts and has the same or better anonymizing features,” which may be the cause.
In a recent article shared with The Hacker News, CrowdStrike stated that the unique Dero cryptojacking operation focuses on finding Kubernetes clusters with anonymous access enabled on a Kubernetes API and listening on non-standard ports accessible from the inter