Tsunami Malware found hidden in image hildeteamtnt/AVscan
August 4, 2020

Two malicious binaries were detected in the container image hildeteamtnt/avscan:latest. The binaries were detected in some of the image’s layers. During runtime the image is set to hijacking the host’s resources and can launch a Denial of Service attack. The image amassed 62 pulls.

Type	IOC	Details
File	cb782b40757d1aba7a3ab7db57b50847	Path: root/SystemHealt
File	b27eb2159c808f844d60900e2c81a4df	Path: root/AVscan
Image	hildeteamtnt/avscan:latest	https://hub.docker.com/r/hildeteamtnt/avscan
IP address	178[.]255[.]151[.]130	Attacker’s IP address

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo

Aqua Security

Aqua Security stops cloud native attacks across the application lifecycle and is the only company with a $1M Cloud Native Protection Warranty to guarantee it. As the pioneer in cloud native security, Aqua helps customers reduce risk while building the future of their businesses. The Aqua Platform is the industry's most integrated Cloud Native Application Protection Platform (CNAPP), protecting the application lifecycle from code to cloud and back. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL with Fortune 1000 customers in over 40 countries.

Use Cases

Environments

Partners

Resources

About Us

Get in Touch

Products

Get Started

Tsunami Malware found hidden in image hildeteamtnt/AVscanAugust 4, 2020

Two malicious binaries were detected in the container image hildeteamtnt/avscan:latest. The binaries were detected in some of the image’s layers. During runtime the image is set to hijacking the host’s resources and can launch a Denial of Service attack. The image amassed 62 pulls.

Tsunami Malware found hidden in image hildeteamtnt/AVscan
August 4, 2020