DOCKER IMAGELESS REPOSITORIES USED TO PUNT MALWARE AND PHISHING SCHEMES

Summary from the TLDR InfoSec newsletter

JFrog identified that nearly 20% of repositories on DockerHub were imageless repositories that were involved in three campaigns to social engineer users to download malware or expose credit card information. The attacks would include links in the description of imageless repositories on DockerHub to redirect users to malicious pages. JFrog worked with DockerHub to remove the repositories and remove the capability to include links in imageless repositories' descriptions.