Docker container as a cryptocurrency mining malware

Jen Miller-Osborn from Palo Alto Networks' Unit 42 group shared their research findings on the docker container malware that is installed to mine cryotocurrency. Attackers upload legitimate images of the docker container that imbedded with cryotocurrency mining malware. This is relatively hard to detect because no malicious activity like slowing down the system process. It quietly sits in the system and waits for the right moment to steal the currency. The bigger concern is that this attack can evolve to something bigger attack like ransomware. To mitigate this attack you need to have the threat signatures in your stateful firewall and run something that look inside of the cloud container and check for malicious behaviors.