Malicious cryptominer process using 100% CPU related to docker container running OpenVidu

Earlier today I’ve realised my CPU is 100% used by a strange process, that after some research I found it is related to crypto-mining. It seems the issue is related to the Openvidu Docker image containing the Redis database image - the issue being the port of the Redis db made accessible to the internet. The details are in the two links provided.

Could this be prevented by setting the port of the Docker Image of the Redis DB to being closed by default and hence not exposed to the internet. I am aware that all unused ports should be closed by server admins, however not everyone is a server admin and not everyone remembers to do so.
Thanks in advance.

Yes this bug already reported in openvidu. So they will solve this bug in 2.15.0 release. Stay tuned for new release

If you only open the recommended ports, it shouldn’t happened.

In 2.15 (to be released this week) redis DB will be secured with password to strength security.

Excellent, keep up the good work ! :+1:

1 Like