Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Citrix Patches Zero-Day Vulnerabilities in its ADC and Gateway Products

Docker: Lightweight Linux Containers for Consistent Development and Deployment

2020 Cyber Attacks Statistics – HACKMAGEDDON

Rancher (Docker Container Management)

New PyLoose Malware Hijacks Computational Power For Cryptocurrency Mining

Exposed Devices Used as Botnet to Scan Internet

Docker servers hacked in ongoing cryptomining malware campaign

Abcbot - An Evolution of Xanthe - Cado Security

感染広げるXantheマルウェア、誤った構成のDockerサーバが拡散の原因に：セキュリティ設定ミスのあるDockerイメージが狙われる - ITmedia エンタープライズ

Threat Alert: An Attack Against a Docker API Leads To Hidden Cryptominers

Xanthe - Docker aware miner