Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

IJMS Topical Collection : Feature Papers in Molecular Pathology, Diagnostics, and Therapeutics

Xanthe挖矿僵尸网络卷土重来- 360CERT

Cryptojacking Attack Targets Make-A-Wish Foundation Website

Abcbot - An Evolution of Xanthe - Cado Security

Attackers Cryptojacking Docker Images to Mine for Monero

Rancher (Docker Container Management)

Xanthe Cryptomining Botnet Attack Targeting Docker Installations - Latest Hacking News

Latest Variant of Yashma Ransomware Targets Several English-Speaking Nations

感染広げるXantheマルウェア、誤った構成のDockerサーバが拡散の原因に：セキュリティ設定ミスのあるDockerイメージが狙われる - ITmedia エンタープライズ

Ivanti Addresses A Zero-Day Flaw in its MobileIron Platform

Threat Alert: An Attack Against a Docker API Leads To Hidden Cryptominers