Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

Cybersecurity researchers found that threat actors created roughly 4.6 million "imageless" Docker Hub repositories (2.81M used as redirect/landing pages) over multiple campaigns from 2021–2023 to host phishing pages and deliver malware/monetization payloads; JFrog identified 208,739 fake accounts used to seed the repositories and Docker removed the malicious content after disclosure.