ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet
Summary
Oligo Security has reported that the ShadowRay 2.0 attack exploits a two-year-old vulnerability in the Ray AI framework to create a self-replicating cryptocurrency mining botnet using infected NVIDIA GPU clusters. This ongoing threat highlights the severity of unpatched vulnerabilities and the potential for widespread exploitation in the cybersecurity landscape.
Original Article Summary
Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence (AI) framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0, is an evolution of a prior wave that was observed between September 2023 and March 2024. The attack, at its core,
Impact
Ray open-source AI framework, NVIDIA GPUs
In the Wild
Yes
Timeline
Ongoing since 2023
Remediation
Update the Ray framework to the latest version and apply security patches as they become available.