Undetectable Linux Malware Targeting Docker Servers With Exposed APIs
Security researchers at Intezer uncovered ‘Doki’, a Linux backdoor that evades all major antivirus engines and targets misconfigured Docker API endpoints on AWS, Azure, and Alibaba Cloud by using a Dogecoin blockchain-based C2 domain generation algorithm.