From zdnet.com
![Docker](https://zdnet2.cbsistatic.com/hub/i/2020/11/30/9593ff7b-7f5b-40d2-a396-034d9ff5d52c/docker.png)
Towards the end of 2017, there was a major shift in the malware scene. As cloud-based technologies became more popular, cybercrime gangs also began targeting Docker and Kubernetes systems.
Most of these attacks followed a very simple pattern where threat actors scanned for misconfigured systems that had admin interfaces exposed online in order to take over servers and deploy cryptocurrency-mining malware.