CONTAINERISED CLICKS: MALICIOUS USE OF 9HITS ON VULNERABLE DOCKER HOSTS

Summary from the TLDR InfoSec newsletter

Vulnerable Docker services are being targeted to deploy XMRig cryptocurrency miner and 9Hits Viewer software, marking the first case of 9Hits being used maliciously. The threat actors aim to diversify their money-making strategies by compromising Docker hosts via Shodan scans and running headless Chrome instances to generate web traffic credits.