Docker zombie malware infects containers for crypto mining and self-replication

A novel malware campaign targeting containerized infrastructures has emerged, exploiting insecurely exposed Docker APIs to spread malicious containers and mine Dero cryptocurrency.

Dubbed a “Docker zombie outbreak” by cybersecurity researchers at Kaspersky, this attack leverages a self-replicating propagation mechanism to transform compromised containers into “zombies” that mine cryptocurrency and infect new victims.

The campaign, detected during a recent compromise assessment, showcases an alarming degree of automation, requiring no command-and-control (C2) server as it spreads exponentially across vulnerable networks worldwide.

Read more at GBHackers