- Attackers exploit exposed Docker APIs to deploy cryptojackers and scan for more targets
- The malware installs persistence tools, includes inactive code for Telnet and Chrome port attacks, and may evolve into a botnet
- Akamai urges isolating Docker, limiting exposed services, and more
Cybercriminals are targeting exposed Docker APIs to install cryptojackers, scan the internet for more potential victims, and possibly even build out a botnet.
