New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet
Posted on October 1, 2024 • 1 min read • 61 wordsCybersecurity researchers have uncovered a new cryptojacking campaign targeting the Docker Engine API with the goal of co-opting the instances to join a malicious Docker Swarm controlled by the threat actor. This enabled the attackers to use Docker Swarms orchestration features for command-and-control (C2) purposes, Datadog researchers Matt Muir and Andy
Cybersecurity researchers have uncovered a new cryptojacking campaign targeting the Docker Engine API with the goal of co-opting the instances to join a malicious Docker Swarm controlled by the threat actor. This enabled the attackers to “use Docker Swarm’s orchestration features for command-and-control (C2) purposes,” Datadog researchers Matt Muir and Andy Giron said in an analysis. The attacks