Hackers abuse container technology to execute supply chain attacks

guest · Aug 13, 2021

Hackers abuse container technology to execute supply chain attacks
Malicious container images were hidden in plain sight on Docker Hub
August 12, 2021
https://www.techradar.com/news/hackers-abuse-container-technology-to-execute-supply-chain-attacks

Cybercriminals have begun using malicious container images as a means to install cryptominers on enterprise networks though they can also be used as part of a supply chain attack targeting cloud native environments.

The cybersecurity firm Aqua Security uncovered several supply chain attacks that use malicious container images to compromise their victims when its threat research team, Team Nautilus was performing its daily scan of Docker Hub for malicious activity according to a new blog post.
Click to expand...

The first three container images the research team discovered (thanhtudo, thieunutre and chanquaa) all execute a script called dao.py which is written in Python and was previously used in several campaigns that leveraged typo squatting to hide their malicious container images on Docker Hub. [...]
Click to expand...

Aqua Security: Threat Alert: Supply Chain Attacks Using Container Images

Team Nautilus, Aqua Security’s threat research team, has uncovered several supply chain attacks that use malicious container images to compromise their victim. These five container images were found on Docker Hub, which we scan daily for signs of malicious activity. The images hijack organizations’ resources to mine cryptocurrency and can be used as part of a supply chain attack targeting cloud native environments.
Click to expand...

Log in or Sign up

Hackers abuse container technology to execute supply chain attacks

guest Guest

Log in or Sign up

Hackers abuse container technology to execute supply chain attacks

guest Guest

Useful Searches