ATTACKERS DEPLOYING NEW TACTICS IN CAMPAIGN TARGETING EXPOSED DOCKER APIS

Summary from the TLDR InfoSec newsletter

This blog post dives into a new malware campaign that targets exposed Docker API endpoints to deliver cryptocurrency miners and other payloads. The campaign uses a remote access tool to execute more malware and a utility to spread via SSH.