Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Attackers Cryptojacking Docker Images to Mine for Monero

Abcbot - An Evolution of Xanthe - Cado Security

Xanthe挖矿僵尸网络卷土重来- 360CERT

Docker servers hacked in ongoing cryptomining malware campaign

Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners

Xanthe挖矿僵尸网络卷土重来- 360CERT

Xanthe - Docker aware miner

Azure and Malware Sandboxes - Hakin9 - IT Security Magazine

GitHub - lnxd/docker-phoenixminer: Containerised version of PhoenixMiner for AMD GPUs. Helps turn your Unraid server into an Ethereum / cryptocurrency mining rig. Contains AMD drivers. Not affected by the AMD reset bug

Docker Consulting Services Docker Container Management