Tag: chkstart

1 Attack Reports | 0 Vulnerabilities

Attack reports

Attackers deploying new tactics in campaign targeting exposed Docker APIs

Datadog Security Researchers recently encountered a new campaign that targets Docker API endpoints publicly exposed without authentication, with the objective of spreading cryptojacking malware. The observed TTPs bear resemblance to those seen in Spinning YARN, another campaign discovered in March …
docker
2024-06-20
xmrig miner
compiler
yarn
docker host
spinning yarn
docker engine
mnt directory
go code
tencent
vurl
exeremo
chkstart
execstartpost
Published: June 20, 2024
Linked vulnerabilities : CVE-2023-22515, CVE-2022-26134
Downloadable IOCs: 37
Click here to see more Attack Reports