DVIUS Intelligence Summary: Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign - Analysis from Thehackernews.
An active campaign has been observed targeting internet-exposed instances
running ComfyUI, a popular stable diffusion platform, to enlist them into a
cryptocurrency mining and proxy botnet.
"A purpose-built Python scanner continuously sweeps major cloud IP ranges for
vulnerable targets, automatically installing malicious nodes via
ComfyUI-Manager if no exploitable node is already
DVIUS AI Assessment: This incident highlights the ongoing evolution of cyber threats. Organizations should prioritize patch management, employee awareness training, and multi-factor authentication to mitigate similar risks. For full details, refer to the original source.