StatsFirst seenMay 2023Last seenOctober 2026Alert name variantsAlert NameEngineGen:Variant.Docker.1AVWin32.Trojan.DockerATP Sandbox Adv. HeuristicsRelated IPS SignaturesSignature NameEngineSERVER-WEBAPP Docker API exec request with nsenter host namespace escape - Carbonato worm lateral spreadIPS-NPASERVER-WEBAPP Docker API privileged container creation with host root bind - Carbonato worm lateral spreadIPS-NPARelated blogsnpm Stealer Reads Its C2 From an Ethereum ContractAugust 4, 2026·5 min readOpenClaw Trap: AI-Assisted Lure Factory Targets Developers & GamersMarch 23, 2026·13 min readDNS Tunneling: The Blind Spot in Your Network Security StrategyAugust 26, 2025·7 min readSecuring LLM Superpowers: Navigating the Wild West of MCPAugust 13, 2025·12 min readResurgence of Phishing-as-a-Service (PhaaS) platformsApril 18, 2018·7 min read