Millions of Malicious Containers Found on Docker HubInfosecurity Magazine·Apr 30, 14:30 UTC · Apr 30, 2024Malware42
Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 YearsThe Hacker News·May 4, 08:19 UTC · May 4, 2024Malware42
Experts Find 1600+ Malicious Docker Hub ImagesInfosecurity Magazine·Nov 25, 10:00 UTC · Nov 25, 2022Malware30
Docker Hub and Bitbucket Resources Hijacked for CryptoInfosecurity Magazine·Mar 5, 11:55 UTC · Mar 5, 2021Malware30
Docker Images Containing Cryptojacking Malware Distributed via Docker HubThe Hacker News·Jun 25, 10:42 UTC · Jun 25, 2020Malware130
Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain RisksThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2025MalwareCVE-2024-309460
Week in review: Docker Hub breach, identifying malware in embedded systems, CCPA implementationHelp Net Security·May 5, 00:00 UTC · May 5, 2019Malware142
Unsecured Kubernetes Instances Could Be Vulnerable to ExploitationPalo Alto Unit 42·Jun 6, 12:44 UTC · Jun 6, 2024Malware130
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
Alert: OracleIV DDoS Botnet Targets Public Docker Engine APIs to Hijack ContainersThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2023Malware155
Docker Honeypot Reveals Cryptojacking as Most Common Cloud ThreatPalo Alto Unit 42·Jun 6, 12:40 UTC · Jun 6, 2024Malware30
Python Malware Poses DDoS Threat Via Docker API MisconfigurationInfosecurity Magazine·Nov 13, 16:30 UTC · Nov 13, 2023Malware142
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & MoreThe Hacker News·Feb 26, 11:25 UTC · Feb 26, 2026MalwareCVE-2026-22769CVE-2026-25926CVE-2026-26119+32 CVEs60
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes WiperThe Hacker News·Mar 25, 14:32 UTC · Mar 25, 2026MalwareCVE-2026-33634160
New Cryptojacking Attack Targets Docker API to Create Malicious Swarm BotnetThe Hacker News·Oct 1, 06:22 UTC · Oct 1, 2024Malware142
30 Docker images downloaded 20M times in cryptojacking attacksSecurity Affairs·Mar 30, 07:57 UTC · Mar 30, 2021Malware42
TeamTNT targets poorly configured Docker servers exposing REST APIsSecurity Affairs·Nov 10, 07:29 UTC · Nov 10, 2021Malware130
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
New Cryptojacking Malware Targets Docker with Novel Mining TechniqueInfosecurity Magazine·Apr 22, 15:15 UTC · Apr 22, 2025Malware30
Docker Malware Exploits Teneo Web3 Node to Earn Crypto via Fake Heartbeat SignalsThe Hacker News·Apr 23, 05:04 UTC · Apr 23, 2025MalwareCVE-2022-26210CVE-2022-26187CVE-2024-12987135
LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP PacketsThe Hacker News·Oct 17, 04:34 UTC · Oct 17, 2025MalwareCVE-2024-2389747
New Docker Malware Steals CPU for Crypto & Drives Fake Website TrafficThe Hacker News·Jan 18, 16:31 UTC · Jan 18, 2024Malware30
Dero miner spreads inside containerized Linux environmentsKaspersky Securelist·May 21, 10:00 UTC · May 21, 2025Malware42
TeamTNT's Silentbob Botnet Infecting 196 Hosts in Cloud Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Malware42
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer AccountThe Hacker News·May 21, 05:56 UTC · May 21, 2026Malware42
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-forThe Hacker News·Sep 23, 12:30 UTC · Sep 23, 2025Malware130
Crypto-Thieves Cost Victims 53 Times What They MakeInfosecurity Magazine·Sep 29, 10:15 UTC · Sep 29, 2022Malware42
Ongoing Autom Cryptomining Malware Attacks Using Upgraded Evasion TacticsThe Hacker News·Jan 4, 10:40 UTC · Jan 4, 2022Malware30
Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow InstancesThe Hacker News·Jun 9, 16:55 UTC · Jun 9, 2021Malware42
Knock-Knock Docker!! Will you let me in? Open API Abuse in Docker ContainersSecurity Affairs·Nov 30, 10:13 UTC · Nov 30, 2018Malware130
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023Help Net Security·Mar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108CVE-2026-20127160