Nearly 20% of Docker Hub Repositories Spread Malware & Phishing Scams
Essential information
- Published
- 01/05/2024 19:59
- Modified
- 02/05/2024 11:13
- Tags
- campaigns docker hub freehtmlvalidator.exe phishing repositories
- Related entities
- 46 observables, 13 techniques (mitre)
Description
This report details an investigation by JFrog Security researchers on a coordinated attack on Docker Hub, where millions of malicious repositories were planted to spread malware and phishing scams. It analyzes three major malware campaigns, dubbed 'Downloader', 'eBook Phishing', and 'Website SEO', that exploited Docker Hub's repository documentation feature. The report provides insights into the attackers' tactics, techniques, and infrastructure, highlighting the challenges of moderating open platforms.