Graboid campaign (Campaign)
ID: e244a3b1-fa48-587c-b2a6-45ee3a21327b
STIX ID: report--e244a3b1-fa48-587c-b2a6-45ee3a21327b
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2019-10-16
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
Unit42 reports the discovery of Graboid, the first-known cryptojacking worm embedded in Docker Hub container images; the worm propagates by infecting images and registry workflows, enabling large-scale cryptomining on compromised hosts. The analysis covers technical behavior, propagation techniques, indicators of compromise, and recommended mitigations for registries and containerized environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.