Security researcher Aviv Sasson of Unit 42 at Palo Alto Networks discovered cryptocurrency miners in 30 containers on Docker Hub library that have been downloaded more than 20 million times.

Docker Hub is the largest library of container applications, allowing companies to share images internally or with their customers, and the developer community to distribute open source projects.

According to the expert, the images came from 10 different accounts. In most cases, attackers mined for Monero cryptocurrency, but some malicious activities were aimed at mining for Grin (GRIN) or ARO (Aronium) cryptocurrency.

Source: securitylab.ru