Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks
According to recent research from Trend Micro, malicious actors have been seen deploying the SRBMiner crypto miner on compromised instances via targeting Docker remote API servers.
In a technical paper released today, researchers Abdelrahman Esmail and Sunil Bharti stated that the threat actor carried out their crypto mining operations on the Docker host by utilizing the gRPC protocol over h2c to circumvent security measures.
Prior to requesting gRPC/h2c upgrades and gRPC ways to control Docker functionality, the attacker first verified the availability and version of the Docker API read more about Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our th...