AESDDoS botnet malware target Docker containers

guest · Jun 14, 2019

AESDDoS botnet malware target Docker containers
June 14, 2019
https://www.scmagazine.com/home/sec...filtrates-containers-via-exposed-docker-apis/

A newly discovered botnet malware exploits an API misconfiguration in the open-source version of the DevOps tool, Docker Engine-Community, to infiltrate containers and run a variant of the Linux botnet malware AESDDoS, according to a Trend Micro blog post.

“Allowing external access — whether intentionally or by misconfiguration — to API ports allows attackers to gain ownership of the host, giving them the ability to poison instances running within it with malware and to gain remote access to users’ servers and hardware resources,” the blog post noted.
External access to API ports allows attackers to gain ownership of the host, giving them the ability to ultimately gain remote access to users’ servers and hardware resources.

Researchers also noticed threat actors abusing a tool called a Docker Batch Test that was developed to detect vulnerabilities in Docker.
Click to expand...

Trend Micro: AESDDoS Botnet Malware Infiltrates Containers via Exposed Docker APIs

Log in or Sign up

AESDDoS botnet malware target Docker containers

guest Guest

Log in or Sign up

AESDDoS botnet malware target Docker containers

guest Guest

Useful Searches