In this blog entry, we discuss how malicious actors are exploiting Docker remote API servers via gRPC/h2c to deploy the cryptominer SRBMiner to facilitate their mining of XRP on Docker hosts.
Article Link: Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach | Trend Micro (US)