Siloscape malware threatens the cloud by targeting Windows containers

Guard your Kubernetes clusters.



What you need to know


A malware that targets Windows containers was discovered in March 2021.
The man who found it, Daniel Prizmant, dubbed it "Siloscape."
Siloscape aims to steal data and inject cryptocurrency miners.


Unit 42's Daniel Prizmant says he's discovered "the first known malware targeting Windows containers." Unit 42 is the cybersecurity consulting group for Palo Alto Networks that has announced its discovery of Siloscape and disclosed the dangers the malware has for cloud environments as we know them. Though the group has seen malware that goes after containers in Linux "due to the popularity of that operating system in cloud environments," it gives Siloscape the distinction of being the first to go after Windows containers.

"Siloscape is heavily obfuscated malware targeting Kubernetes clusters through Windows containers," Prizmant said in his highly technical blog post outlining Siloscape and the threat it poses. "Its main purpose is...