🚨 New Linux malware is targeting unsecured Docker servers to mine $DERO, according to @CoinDesk.
🧨 Attack highlights:
Exploits exposed Docker API on port 2375
Deploys 2 Golang-based implants: fake nginx + cloud miner
Infected nodes self-propagate across the internet — no C2 needed
🌐 Over 520 public Docker APIs were exposed as of early May.
🔁 Wallets & nodes match past Kubernetes attacks — likely same actors.
💡 Another wake-up call for #Web3 infrastructure:
Decentralized ≠ Immune to threats.
#CyberSecurity #Docker