Commando Cat: A Novel Cryptojacking Attack Abusing Docker Remote API Servers
Tags
cmtmf-attack-pattern: Command And Scripting Interpreter Exploit Public-Facing Application
attack-pattern: Direct Command And Scripting Interpreter - T1623 Deploy Container - T1610 Escape To Host - T1611 Exploit Public-Facing Application - T1377 Ingress Tool Transfer - T1544 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Standard Encoding - T1132.001 Unix Shell - T1059.004 Vulnerabilities - T1588.006 Unix Shell - T1623.001 Command-Line Interface - T1059 Data Encoding - T1132 Exploit Public-Facing Application - T1190 Remote File Copy - T1105 Exploit Public-Facing Application
Show in Graph
Common Information
Type Value
UUID 646dd033-6957-4e2d-8444-05a22b271931
Fingerprint 250708191d255b05
Analysis status DONE
Considered CTI value 2
Text language
Published June 6, 2024, midnight
Added to db Oct. 15, 2024, 4:21 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Commando Cat: A Novel Cryptojacking Attack Abusing Docker Remote API Servers
Title Commando Cat: A Novel Cryptojacking Attack Abusing Docker Remote API Servers
Detected Hints/Tags/Attributes 59/2/9
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_sg/research/24/f/commando-cat-a-novel-cryptojacking-attack-.html
Details Source https://www.trendmicro.com/en_au/research/24/f/commando-cat-a-novel-cryptojacking-attack-.html
Details Source https://www.trendmicro.com/en_nz/research/24/f/commando-cat-a-novel-cryptojacking-attack-.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details IPv4 3 
45.9.148.193
Details MITRE ATT&CK Techniques 542 
T1190
Details Domain 3 
cmd.cat
Details Domain 3 
leetdbs.anondns.net
Details MITRE ATT&CK Techniques 16 
T1610
Details MITRE ATT&CK Techniques 86 
T1059.004
Details MITRE ATT&CK Techniques 12 
T1611
Details MITRE ATT&CK Techniques 99 
T1132.001
Details MITRE ATT&CK Techniques 492 
T1105