Black-T Malware: How TeamTnT Exploits Exposed Docker Daemon APIs for Cryptojacking
The TeamTnT hacking group deployed a new malware variant called Black-T that targets exposed Docker daemon APIs to steal credentials, scrape passwords, and mine Monero. Here is a technical breakdown of the attack chain and defensive guidance.