Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Researchers Disclose Critical RCE Flaw in vm2 Sandbox Library

Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners

Misconfigured Docker Servers Under Attack By Xanthe Malware

This is how Docker containers can be exploited to mine for cryptocurrency

Tainted, crypto-mining containers pulled from Docker Hub

SANS Daily Network Security Podcast (Stormcast) for Wednesday, December 2nd 2020 - SANS Internet Storm Center

High Availability and Horizontal Scaling with Docker Swarm, by Brian Anstett, Brian Anstett Things I learned

Xanthe - Docker aware miner

Azure and Malware Sandboxes - Hakin9 - IT Security Magazine

Abcbot - An Evolution of Xanthe - Cado Security

Cryptojacking Attack Targets Make-A-Wish Foundation Website

Xanthe - Docker aware miner