Doki Dukes with Kinsing
released on 2020-08-05 @ 06:22:00 PM
Cloud infrastructure is premium real estate for cryptojackers and they are constantly looking for new ways to exploit your workloads. Among them is "Doki," which was recently reported by Intezer and is distinguished by exploitation of the Docker API and for going undetected until only recently.
A closer look at Doki variants beginning in early February 2020 revealed various configurations that appear to be targeting Kinsing infrastructure.