Skip to main content

Malware attacks on Docker Hub spread millions of malicious repositories

posted onMay 3, 2024
by l33tdawg
Tech Radar
Credit: Tech Radar

Cybersecurity researchers from JFrog recently discovered three malicious campaigns in Docker Hub - Docker’s cloud-based registry service for storing and sharing container images. These campaigns contained millions of repositories that pushed generic trojan malware to the developers.

The conclusion of JFrog’s findings is that with open-source repositories such as Docker Hub, keeping them clean of malware is an immensely difficult task.

As the researchers explained, Docker Hub repositories have two key aspects: the images (an application that can be updated and accessible through a fixed name), and the metadata (short descriptions and documentation in HTML format, which will be displayed on the repository’s main page). “Usually, repository documentation aims to explain the purpose of the image and provide guidelines for its usage,” the researchers explained.

Source

Tags

Industry News

You May Also Like

Recent News

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Friday, June 7th

Thursday, June 6th