Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Docker Image - Keeper Secrets Manager

Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners

Xanthe挖矿僵尸网络卷土重来- 360CERT

Xanthe - Docker aware miner

感染広げるXantheマルウェア、誤った構成のDockerサーバが拡散の原因に：セキュリティ設定ミスのあるDockerイメージが狙われる - ITmedia エンタープライズ

Docker is the Least Interesting Part of Docker - Wikibon Research

Xanthe挖矿僵尸网络卷土重来- 360CERT

Researchers Found New Cryptojacking Campaign Targeting Linux Machines

5G Security-Enhanced Open Radio Access Networks – Nephio

Latest Variant of Yashma Ransomware Targets Several English-Speaking Nations

SANS Daily Network Security Podcast (Stormcast) for Wednesday, December 2nd 2020 - SANS Internet Storm Center

This is how Docker containers can be exploited to mine for cryptocurrency

Docker — Limit Container CPU Usage, by Tony, Geek Culture