When investigating open-source information, we found earlier samples of the bot on VirusTotal detected by a very few anti-malware engines. In fact, despite Xanthe having been active since March 2020, only one of the scripts had been detected. Furthermore, Oliveira says TeamTNT has now added a feature to collect Docker API credentials, on top of […]