Docker

Reported Context (2)

A newly discovered Docker botnet is implanting AI agents onto compromised hosts in order to send stolen credentials back to the attackers. Carbonato Botnet Compromises Exposed Docker Hosts to Steal AI API Keys
KICS showed multichannel poisoning across Docker Hub, VS Code/OpenVSX, and GitHub Actions, followed by a downstream hijack of @bitwarden/cli using stolen npm tokens. TeamPCP Supply-Chain Attacks Steal Credentials Through KICS and elementary-data

Malware (1)

People (2)

Threat Actors (3)

MITRE ATT&CK (21)

Vendors (7)

Products (14)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.