Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
Malware Families
Excerpt
Introduction Containerization using Docker has become firmly established in modern development standards, significantly increasing the speed and convenience of deploying various services. Developers often use ready-made Docker images, making only minimal changes. The largest repository of container images is the Docker Hub service. Container-hosted infrastructure is an attractive target for attackers. At a minimum, a compromised container can be used for DDoS attacks,…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Attack Flow9 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-32463 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-24061 | High | Score 84/100 | First seen |
| CVE | CVE-2025-49844 | Medium | Score 51/100 | First seen |
| CVE | CVE-2023-4911 | Medium | Score 51/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| CVE | CVE-2021-4034 | High | Score 79/100 | First seen |
IOC Relationship Graph
Building graph…