MITRE ATT&CKcampaign
C0045 ShadowRay
- Domain
- enterprise
- Version
- 1.0
- Created
- 2024-12-02
Description
ShadowRay was a campaign that began in late 2023 targeting the education, cryptocurrency, biopharma, and other sectors through a vulnerability (CVE-2023-48022) in the Ray AI framework named ShadowRay. According to security researchers ShadowRay was the first known instance of AI workloads being activley exploited in the wild through vulnerabilities in AI infrastructure. CVE-2023-48022, which allows access to compute resources and sensitive data for exposed instances, remains unpatched and has been disputed by the vendor as they maintain that Ray is not intended for use outside of a strictly controlled network environment.
Related
Uses · MITRE ATT&CK (10)
- T1496.001 Compute Hijacking sub-technique
- T1027.013 Encrypted/Encoded File sub-technique
- T1588.002 Tool sub-technique
- T1059.006 Python sub-technique
- T1003.008 /etc/passwd and /etc/shadow sub-technique
- T1546.004 Unix Shell Configuration Modification sub-technique
- T1190 Exploit Public-Facing Application technique
- T1016 System Network Configuration Discovery technique
- T1068 Exploitation for Privilege Escalation technique
- T1105 Ingress Tool Transfer technique
References
- https://www.oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild Oligo ShadowRay Campaign MAR 2024