Hacker's found new way to use Docker as cryptojacking plateform

Docker is a set of platform as a service products that uses OS-level virtualization to deliver software in packages called containers. Containers are isolated from one another and bundle their own software, libraries and configuration files; they can communicate with each other through well-defined channels

Developing apps today requires so much more than writing code. Multiple languages, frameworks, architectures, and discontinuous interfaces between tools for each lifecycle stage creates enormous complexity.

Docker simplifies and accelerates your workflow, while giving developers the freedom to innovate with their choice of tools, application stacks, and deployment environments for each project.

Unit42 researcher said they identified a malicious Docker Hub account , azurenql, which is running from October 2019 and hosting six malicious images intended to mine the cryptocurrency, Monero.

image name - azurenql/53_57:442
image name - azurenql/93_164:442
image name - azurenql/234_122:442
image name - azurenql/227_135:442
image name - azurenql/227_135_app:442

image name - azurenql/227_135_tor:442

The coin mining code within the image intends to evade network detection by using network anonymizing tools such as ProxyChains and Tor. The images hosted on this account have been collectively pulled more than two million times. For context, there are legitimate Azure related images under the official Microsoft Docker Hub account that have anywhere from a few thousand to 100 million+ pulls. One of the wallet IDs identified has been used to earn more than 525.38 XMR, which roughly translates to $36,000 USD. Additionally, when we last checked minexmr.com for this wallet ID, we saw recent activity indicating that it’s still being used..