April 30, 2024 at 05:02PM Docker removed 3 million imageless public repositories from Docker Hub following a discovery by JFrog researchers. The repositories were found to contain links to malicious websites. JFrog highlighted the need for increased moderation on the platform. The attackers exploited a policy loophole that allowed them to include links in description … Read more
April 30, 2024 at 01:33PM JFrog researchers discovered large-scale malicious campaigns targeting Docker Hub, where 3.2 million repositories hosted spam, malware, and phishing content. Analyzing three years of activity, they identified 4.6 million imageless repositories, with 2.9 million used in the campaigns. The repositories were unusable but contained malicious payloads, including trojans and scams. All … Read more
April 30, 2024 at 10:01AM Cybersecurity researchers have found malicious “imageless” containers in Docker Hub, creating a potential for supply chain attacks. The containers house documentation that leads users to phishing or malware websites. Over 4 million such repositories have been identified, used to redirect users to fraudulent sites in three distinct campaigns. This underscores … Read more