🚨 New Linux malware is targeting unsecured Docker servers to mine $DERO, according to @CoinDesk.


🧨 Attack highlights:


Exploits exposed Docker API on port 2375


Deploys 2 Golang-based implants: fake nginx + cloud miner


Infected nodes self-propagate across the internet — no C2 needed


🌐 Over 520 public Docker APIs were exposed as of early May.

🔁 Wallets & nodes match past Kubernetes attacks — likely same actors.


💡 Another wake-up call for #Web3 infrastructure:

Decentralized ≠ Immune to threats.


#CyberSecurity #Docker