Intro to Fileless Malware in Containers

This report explains fileless malware targeting Linux and container environments, detailing how attackers can use techniques such as memfd_create, ptrace, and LD_PRELOAD to inject and execute ELF binaries directly in memory (demonstrated via a memrun demo), and demonstrates detection approaches using Tracee and Aqua CNDR along with recommendations for vulnerability scanning and runtime behavioral monitoring.