![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlM5GyTULPBhCZSXJKIocQ7jj0XfHQXV1f4Phtw7RyVD3hEJS7_ICd4cq-pzdJ-3IGck95NC2JZeCVCExM3x-GgTXTIJp5MXWlzmyUL5h5ecyGEqdPr93bbfCFZOEI2XMmn345RgRV_sEz7hhpZ_YYhiygqgL1M-nl-0DORD-gGb1MP_rj0ApxoPOvnRxH/s1600/docker.jpg)
Publicly-accessible Docker Engine API instances are being targeted by threat actors as part of a campaign designed to co-opt the machines into a distributed denial-of-service (DDoS) botnet dubbed OracleIV.
“Attackers are exploiting this misconfiguration to deliver a malicious Docker container, built from an image named ‘oracleiv_latest’ and containing Python malware compiled as an ELF executable
Source:: The Hackers News