Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Xanthe - Docker aware miner

Researchers Disclose Critical RCE Flaw in vm2 Sandbox Library

Docker servers hacked in ongoing cryptomining malware campaign

Docker servers hacked in ongoing cryptomining malware campaign

Missouri Issues Alert Regarding Stolen Health Information Due to IBM MOVEit Data Breach

Abcbot - An Evolution of Xanthe - Cado Security

LoudMiner Cryptominer Uses Linux Image and Virtual Machines

Xanthe - Docker aware miner

Docker servers hacked in ongoing cryptomining malware campaign

感染広げるXantheマルウェア、誤った構成のDockerサーバが拡散の原因に：セキュリティ設定ミスのあるDockerイメージが狙われる - ITmedia エンタープライズ

Docker: Lightweight Linux Containers for Consistent Development and Deployment

The British Journal of Photography

Xanthe - Docker aware miner