Security roundup: PoeLLM malware hits 3,400+ servers running LiteLLM and Ollama
iThome Taiwan's weekly security roundup for October 12–16 reports that the PoeLLM malware is targeting publicly exposed AI and open-source services including LiteLLM and Ollama, with more than 3,400 servers compromised and used for mining as well as further scanning and attacks. Citing Lumen's Black Lotus Labs, the report says samples contained a test endpoint linked to the LiteLLM command-injection flaw CVE-2026-42271, a possible infection route, and that the attackers hid command-and-control addresses in an English poem on GitHub that can be edited to switch victims to a new server. The same roundup notes Taiwan's Financial Supervisory Commission issued a consultation document on agentic AI security for the financial sector covering governance, risk tiering and controls, and that Singapore's CSA warned the Carbonato botnet deploys AI agents on compromised Docker hosts to steal credentials.
Exposed AI inference and model-gateway services are now concrete malware targets, with compromised hosts reused to widen attacks, while regulators in several jurisdictions begin consulting on security governance for agentic AI.
本週最受矚目的資安消息，莫過於美國司法部與FBI查封中國資安公司永信至誠科技涉及網路攻擊的7個網域，涵蓋漏洞掃描工具Microscan與網路釣魚工具FishHub，該公司過去被指控與中國駭客組織Flax Typhoon關係密切，調查更揭露先前遭攻擊的臺灣案例，再次引發國人關注。由於其攻擊目標遍及全球，美國等7國資安與執法機構也聯合示警，公布相關攻擊手法、漏洞及入侵指標，協助各界偵測與應變。
零售業資安情勢也相當不平靜。法國數百家超市冷凍／冷藏控制系統被攻擊者遠端啟動除霜功能，導致大量食品報廢，突顯老舊OT設備汰換、韌體更新及管理介面暴露於公網的風險；荷蘭連鎖超市Albert Heijn也傳出資安事故，網站、App、物流系統及電子貨架標籤受到影響。另一方面，法國硬體加密貨幣錢包Ledger驚傳設備遭植入隱藏晶片，這樣的供應鏈攻擊事件震驚全球，遭改裝的設備如何流入東南亞經銷通路，仍有待進一步調查釐清。
#PoeLLM#LiteLLM#Ollama#Lumen Black Lotus Labs#Carbonato#Taiwan Financial Supervisory Commission#Docker