A new undetectable (0/61) #Linux malware is hijacking misconfigured #Docker servers with exposed APIs—mostly hosted with popular cloud services like AWS, Azure & Alibaba Cloud.
thehackernews.com/2020/07/docker…
Attackers managed to run this campaign under the radar for at least 6 months.
thehackernews.com/2020/07/docker…
Attackers managed to run this campaign under the radar for at least 6 months.
Besides this, Intezer researchers @NicoleFishi19 and @kajilot also found that the attackers also managed to compromise the host machines by binding newly created containers with the server's root directory, allowing them to access or modify any file on the system.
#infosec
#infosec
Organizations running Docker instances are advised not to expose APIs to the Internet, but if they still need to, then ensure that it is reachable only from a trusted network or VPN only.
Find best Docker security practices here: docs.docker.com/engine/securit…
Find best Docker security practices here: docs.docker.com/engine/securit…
