Exposed Docker Servers targeted with DDoS Malware targeting vulnerable API endpoints. Malware-infested images can be used to mine Monero, a privacy-focused cryptocurrency. XOR DDoS and Kaiji are Linux trojans known for their ability to conduct DDoS attacks. One of the images hosted on this account have been collectively pulled over two million times since the start of the campaign in October 2019, with one of the wallet IDs used to earn more than 525 XMR ($36,000)
Source: https://thehackernews.com/2020/06/cryptocurrency-docker-image.html