17 backdoored Docker images, posted to Docker Hub over the past year and downloaded 5M+ times, removed; some were used to mine at least $90K worth of Monero
17 images posted by a single account over 10 months may have generated $90,000. — A single person or group may have made as much as $90,000 …
Context & Ripple Effects
This attack turned Docker Hub's core value — trusted, ready-made base images — into a delivery mechanism: one account pushed 17 backdoored images over ten months and accumulated more than 5 million downloads before removal. The Monero payout fits a pattern already quantified days earlier, when analysis of 629,126 malware samples found that at least 5% of all Monero in circulation has been mined using malware.
The incident also foreshadows Docker's own security arc: a year later, an unauthorized access to a Hub database exposed data for roughly 190K users, including GitHub and Bitbucket access tokens (the Hub database breach), showing the platform's trust surface being probed from both the content side and the infrastructure side.
First-order effects
- Anyone who pulled these images may be running a hidden Monero miner inside their containers right now — the damage is silent CPU theft rather than visible breakage, so detection depends on teams auditing their deployed images against the 17 removed ones.
- Docker Hub's curation model takes the hit: the platform hosted the payload for ten months at 5M+ downloads, meaning its default posture was to serve unvetted community images as if they were trustworthy.
Second-order effects
- Container registries face pressure to add automated malware scanning and publisher verification as table stakes, because the alternative — every user vetting images manually — collapses the convenience that made Hub dominant.
- The economics are now proven at small scale ($90K from one account), which invites copycats; the related finding that ~400 servers running unpatched Docker instances were cryptojacked via a runC flaw shows attackers attacking Docker from both the image-supply and runtime sides simultaneously.
Third-order effects
- If image-poisoning keeps paying, container supply chains will consolidate around verified publishers and signed images, splitting the registry ecosystem into audited tiers and pushing 'who built this image' into standard procurement questions.
- Monero's privacy properties make it the recurring settlement layer for this class of crime — alongside state-linked operations like the North Korea-linked group that hijacked machines to mine ~$25K in Monero — which sustains regulatory attention on privacy coins as the enabling rail.
The trend: Software supply chains are becoming the preferred cryptojacking vector, with public registries' trust-by-default model turning every popular image repository into a potential distribution channel for covert Monero mining.