Hack history / 2020 / Hack or exploit
Domestic cloud server
Hack or exploit on Aug 7, 2020 · Remote Intrusion
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
Tencent Security Threat Intelligence Center has detected a large number of attacks originating from overseas IP and some domestic IP against domestic cloud server tenants. The attacker blasted into the server through SSH (port 22), and then executed malicious commands to download the Muhstik botnet Trojan. The botnet will control the compromised server to perform SSH lateral movement, download the Monero mining Trojan, and accept remote commands to launch DDoS attacks.
Details
- Date
- Aug 7, 2020
- Kind
- Hack or exploit
- Method
- Remote Intrusion
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Phala Cloud 2026 · Hack or exploit · undisclosed
Cloud AI 2024 · Hack or exploit · $360K
Coin Cloud crypto ATM operator files for bankruptcy 2023 · Collapse or insolvency · $123.6M
Scammers set up a new server at the URL previously used by Ozzy Osbourne's NFT project, stealing thousands 2022 · Scam · $41K
Cloud AI 2024 · Hack or exploit · $360K
Coin Cloud crypto ATM operator files for bankruptcy 2023 · Collapse or insolvency · $123.6M
Scammers set up a new server at the URL previously used by Ozzy Osbourne's NFT project, stealing thousands 2022 · Scam · $41K
Cite this page
SwanBluechip, "Domestic cloud server hack, Aug 7, 2020: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6e50ada094/ (data as of 2026-10-31).