Skip to main content
← Back to research
11 min readBy Assaf Morag

TeamTNT's Docker Gatling Gun Campaign

The notorious TeamTNT threat group has launched a new campaign targeting Docker environments with automated attack tools. This campaign demonstrates the group's continued evolution and focus on containerized infrastructure.

Dubbed the "Gatling Gun" campaign due to its rapid-fire attack methodology, this operation uses automated scanning and exploitation to compromise Docker deployments at scale.