Exposed Docker APIs continue to be used by attackers to create new containers that perform cryptojacking. Earlier this year we reported on attackers utilizing insecure Docker and Kubernetes systems to ...

The attack exploiting the Docker REST API showcased at Black Hat USA 2017 by Aqua Security Software Ltd., an Israeli firm that specializes in container security, highlighted the potential abuse of ...

Threat actors are targeting cloud-based networks by exploiting misconfigured Docker APIs to gain access to containerized environments, then using the anonymity of Tor to hide their deployment of ...

The Docker Engine API is a powerful tool for administrators and developers to manage the Docker environment -- either manually or programmatically. Readers might use the API without even realizing it: ...

Attackers exploit exposed Docker APIs to deploy cryptojackers and scan for more targets The malware installs persistence tools, includes inactive code for Telnet and Chrome port attacks, and may ...

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals from accessing exposed APIs. A newly discovered strain of a cryptomining ...

Attackers are actively scanning for exposed Docker APIs on port 2375 and use them to deploy a malicious payload which drops a Dofloo Trojan variant, a malware known as a popular tool for building ...

Campaign exploits misconfigured Docker APIs to gain network entry and ultimately sets up a backdoor on compromised hosts to mine cryptocurrency. Hackers behind a cryptomining campaign have managed to ...