đ¨ New Linux malware is targeting unsecured Docker servers to mine $DERO, according to @CoinDesk.
𧨠Attack highlights:
Exploits exposed Docker API on port 2375
Deploys 2 Golang-based implants: fake nginx + cloud miner
Infected nodes self-propagate across the internet â no C2 needed
đ Over 520 public Docker APIs were exposed as of early May.
đ Wallets & nodes match past Kubernetes attacks â likely same actors.
đĄ Another wake-up call for #Web3 infrastructure:
Decentralized â Immune to threats.