✨ The Containment Era is here. →Explore ✨

aviatrix logoAviatrix
Under Active Attack

Executive Summary

In June 2024, cybersecurity researchers identified a coordinated global attack campaign dubbed ShadowRay 2.0 targeting exposed Ray clusters—open-source distributed computing environments widely used in AI and machine learning workloads. Attackers exploited an unpatched remote code execution vulnerability in Ray's dashboard service, gaining unauthorized access to cloud and on-premises clusters. Once inside, adversaries deployed self-spreading cryptomining malware, turning infected clusters into part of a large-scale botnet that harnessed high-performance compute resources for illicit cryptocurrency mining, causing potential performance degradation, elevated cloud bills, and risk of further lateral movement.

This campaign demonstrates the growing threat surface posed by AI and data infrastructure, as adversaries increasingly automate the exploitation of software supply chain and configuration weaknesses. The incident highlights the urgency of securing east-west traffic, enforcing least privilege, and maintaining continuous vulnerability management in distributed and cloud-native environments.

Why This Matters Now

With the rapid adoption of AI platforms and distributed compute solutions like Ray, exposed management interfaces and poor segmentation are becoming a prevalent avenue for large-scale, automated attacks. Organizations must act immediately to secure cloud-native and research workloads as attackers shift focus to these high-value resources, which often lack hardened security controls.

Attack Path Analysis

Related CVEs

MITRE ATT&CK® Techniques

Potential Compliance Exposure

Sector Implications

Sources

Frequently Asked Questions

The attackers leveraged an old remote code execution flaw in the Ray dashboard, which allowed unauthenticated access and arbitrary code execution when clusters were exposed to the internet.

Cloud Native Security Fabric Mitigations and ControlsCNSF

Zero Trust segmentation, microsegmentation, network policy enforcement, threat detection, and container/network-specific controls would have substantially limited the attack progression by containing east-west propagation, enforcing least-privilege, and blocking malicious command-and-control traffic and cryptomining activity.

Initial Compromise

Control: Cloud Firewall (ACF)

Mitigation: Ingress filtering would have blocked exploitation attempts to the Ray cluster endpoints.

Privilege Escalation

Control: Zero Trust Segmentation

Mitigation: Context-aware policies would limit privilege escalation by isolating workload access based on role.

Lateral Movement

Control: East-West Traffic Security

Mitigation: Lateral movement would have been detected or blocked between clusters or nodes.

Command & Control

Control: Inline IPS (Suricata)

Mitigation: Malicious C2 traffic signatures would be detected and/or blocked in real time.

Exfiltration

Control: Egress Security & Policy Enforcement

Mitigation: Outbound unauthorized traffic to mining pools is blocked.

Impact (Mitigations)

Suspicious resource usage or anomalous workload behaviors are rapidly detected and remediated.

Impact at a Glance

Affected Business Functions

  • AI Compute Operations
  • Data Processing
  • Research and Development
Operational Disruption

Estimated downtime: 7 days

Financial Impact

Estimated loss: $500,000

Data Exposure

Potential exposure of sensitive AI models, proprietary algorithms, and research data due to unauthorized access and code execution.

Recommended Actions

  • • Audit and restrict inbound access to all cloud workloads, using cloud-native firewalls and strict network policies.
  • • Enforce zero trust segmentation at the workload and namespace level, minimizing east-west movement and privilege inheritance.
  • • Deploy inline IPS and threat detection to actively monitor and block C2, cryptomining, and anomalous east-west communications.
  • • Implement robust egress controls and URL/domain allow-lists to prevent outbound communications to malicious mining pools.
  • • Continuously monitor cloud resource utilization for anomalies and automate response procedures to contain and remediate threats.

Secure the Paths Between Cloud Workloads

A cloud-native security fabric that enforces Zero Trust across workload communication—reducing attack paths, compliance risk, and operational complexity.

Stop Advanced ThreatsGet a Free Workload Attack Path AssessmentUnder Active Attack?
Cta pattren Image