Internet reports that security company Wiz discovered that a hacker group codenamed JINX-0132 is using DevOps tool configuration vulnerabilities on a large scale to conduct cryptocurrency mining attacks. The attack mainly targets tools such as HashiCorp Nomad/Consul, Docker API and Gitea, and approximately 25% of cloud environments are at risk. Attack methods include: deploying XMRig mining software using Nomad's default configuration, executing malicious scripts through Consul's unauthorized API, and controlling exposed Docker APIs to create mining containers.