Attackers exploit exposed Docker APIs to deploy cryptojackers and scan for more targets The malware installs persistence ...

A new exposed Docker API attack uses Tor to hide hackers, install malware, and block admin access, sparking major security ...

The attack chain essentially involves breaking into misconfigured Docker APIs to execute a new container based on the Alpine ...

A threat actor targeting exposed Docker APIs has updated its malicious tooling with more dangerous functionality that could ...

Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet.

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals ...

Attackers are actively scanning for exposed Docker APIs on port 2375 and use them to deploy a malicious payload which drops a Dofloo Trojan variant, a malware known as a popular tool for building ...

Analysts from security firm Trend Micro said in a report today that they've spotted a malware botnet that collects and steals Docker and AWS credentials. Cyber attacks and malware are one of the ...

Abuse of the Docker API allows remote code execution on targeted system, which enables hackers to escalate and persists thanks to novel attacks called Host Rebinding Attack and Shadow Containers. LAS ...