šØ New Linux malware is targeting unsecured Docker servers to mine $DERO, according to @CoinDesk.
š§Ø Attack highlights:
Exploits exposed Docker API on port 2375
Deploys 2 Golang-based implants: fake nginx + cloud miner
Infected nodes self-propagate across the internet ā no C2 needed
š Over 520 public Docker APIs were exposed as of early May.
š Wallets & nodes match past Kubernetes attacks ā likely same actors.
š” Another wake-up call for #Web3 infrastructure:
Decentralized ā Immune to threats.
#CyberSecurity #Docker