A fast moving new threat campaign targeting misconfigured docker, redis, hadooop and confluence has sent admins into fire fighting mode. We will cover the currently active campaign with a threat overview and malware analysis.