Attackers are using Docker containers to spread a cryptojacking worm in a campaign dubbed “Graboid” The worm isn’t sophisticated in its tactics, techniques or procedures, but it can be repurposed by the command-and-control server to run ransomware or other malware. This is the first time the researchers have seen a worm spread through containers in the Docker Engine (Community Edition) The Graboid campaign involves an automated multistep process, Palo Alto Networks Unit 42 threat research unit says.”]
Source: https://www.govinfosecurity.com/graboid-cryptojacking-worm-spreads-through-containers-a-13256