https://www.exploitone.com/cyber-security/how-the-8220-gang-is-compromising-yarn-docker-confluence-and-redis-servers-for-cryptomining/
How the 8220 Gang Is Compromising YARN, Docker, Confluence, and Redis Servers for Cryptomining