Robert Gillen created SOLR-12700:
------------------------------------
Summary: solr user used for crypto mining hack
Key: SOLR-12700
URL: https://issues.apache.org/jira/browse/SOLR-12700
Project: Solr
Issue Type: Bug
Security Level: Public (Default Security Level. Issues are Public)
Affects Versions: 6.6
Environment: Ubuntu running Solr 6.6
Reporter: Robert Gillen
I am struggling to fight an attack were the solr user is being used to crate
files used for mining cryptocurrencies. The files are being created in the
/var/tmp and /tmp folders.
It will use 100% of the CPU.
I am looking for help in stopping these attacks.
All files are created under the solr user.
Any help would be greatly appreciated.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org
