Taking TeamTNT’s Docker Images Offline
Lacework
MAY 25, 2021
The Takeaways TeamTNT targets exposed Docker API to deploy malicious images. Docker images containing TeamTNT malware are being hosted in public Docker repos via account takeovers. TeamTNT leverages exposed Docker hub secrets within GitHub to stage malicious Docker images.
Let's personalize your content