CanisterWorm Targets Docker, Kubernetes, and Redis to Steal Secrets

A financially motivated cybercrime group known as TeamPCP is actively exploiting poorly secured cloud environments using a self-propagating malware called “CanisterWorm.”

The campaign targets exposed Docker APIs, Kubernetes clusters, Redis servers, and known vulnerabilities like React2Shell to gain unauthorized access, steal credentials, and extort victims.

The activity escalated over the past weekend with a destructive twist. Security researchers observed a wiper component embedded in the malware that selectively destroys data on systems configured to use Iran’s time zone or the Farsi language.

This suggests a geopolitical angle layered on top of financially driven operations, although experts believe the primary motive remains data theft and extortion.

TeamPCP has been active since late 2025, focusing almost entirely on cloud infrastructure rather than traditional endpoints.

According to Flare, the group targets misconfigured control planes at scale, with Azure accounting for 61% and AWS 36% of compromised environments.

Instead of developing sophisticated exploits, the group relies on automation and the reuse of known techniques. Once inside a system, CanisterWorm spreads laterally across services, harvesting sensitive data such as:

• SSH keys.
• Cloud access credentials.
• Kubernetes service tokens.
• Cryptocurrency wallets.

The worm also enables persistent access, allowing attackers to maintain control and execute follow-on attacks, including extortion campaigns conducted عبر Telegram.

Supply Chain Attack via Trivy

A key part of TeamPCP’s recent operations involved a supply chain compromise of Trivy, a widely used vulnerability scanning tool from Aqua Security.

On March 19, attackers injected malicious code into official GitHub releases using compromised CI/CD workflows.

The poisoned versions of Trivy were capable of extracting sensitive data from developer environments. Although Aqua Security removed the malicious artifacts, researchers at Wiz confirmed that attackers successfully distributed trojanized builds that harvested credentials at scale.

This marks the second major supply chain incident involving Trivy in recent months, highlighting a growing trend of attackers targeting developer tools to maximize reach.

Researchers from Aikido identified that TeamPCP reused the same infrastructure from the Trivy attack to deploy the CanisterWorm payload. The malware includes logic to check system locale and timezone settings.

• If the system matches Iran-based configurations and has Kubernetes access, it attempts to wipe all cluster nodes.
• If Kubernetes access is unavailable, it wipes the local machine instead.

However, experts note there is no confirmed evidence yet that the wiper successfully destroyed large-scale data, and the payload was active only briefly.

ICP Canisters and Resilient

One unique aspect of this campaign is the use of Internet Computer Protocol (ICP) canisters to host and distribute malware. These blockchain-based components act as tamper-resistant infrastructure that is difficult to take down.

Because ICP canisters remain online as long as operators pay for them, they provide a resilient platform for command-and-control operations and payload delivery. This makes traditional takedown efforts less effective.

TeamPCP has also been abusing GitHub to amplify the reach of its malicious code. After compromising accounts, the group spammed repositories with junk commits and messages, likely to boost visibility in search rankings.

Security researchers warn this tactic increases the chances that infected repositories or packages appear legitimate and are downloaded by unsuspecting developers.

The CanisterWorm campaign highlights a broader shift toward automated, cloud-native attacks and supply chain compromises. By combining misconfigurations, trusted platforms, and scalable tooling, attackers can rapidly expand their reach.

Experts warn that defending against such threats requires stronger cloud security hygiene, stricter access controls, and improved monitoring of software supply chains especially in platforms like GitHub, where detecting malicious clones remains a complex challenge.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.