A crypto mining scheme deployed five malicious Docker images on Docker Hub to hijack computing resources to mine cryptocurrency. These containers are not being managed by an attacker directly, although there’s a script at the entry point that runs an automated attack. Organizations are recommended to vet container images before adding them inside the internal registry.