Darktrace reveals ShadowV2 botnet exploiting Docker misconfigurations in AWS
News Source : SiliconANGLE News
News Summary
- ShadowV2 is a Python-based command-and-control framework hosted on GitHub CodeSpaces.
- The malware infrastructure includes an OpenAPI specification built with FastAPI and Pydantic.
- By packaging attacks in containerized environments with modular functionality, cybercriminals are adopting the same efficiency and usability principles that drive enterprise software.
- Darktrace’s researchers warn that this trend reinforces the need for continuous monitoring of containerized workloads, behavioral analytics capable of detecting anomalous API activity and deeper visibility into cloud deployments.
A new report out today fromDarktrace Ltd.reveals a sophisticated cybercrime campaign that blends traditional malware with cloudnative design principles, exposing how threat actors are evolving dis [+4729 chars]
Never miss a story from us, subscribe to our newsletter