"It’s the primary worm we’ve seen that contains such AWS-specific functionality," the researchers observe. "The worm also steals native credentials and scans the internet for misconfigured Docker platforms. We have seen the attackers, who name themselves 'TeamTNT,' compromise a...
