[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:mitre-attack\u002Ft1610":3},{"item":4,"lessons":18,"controls":40,"related":68},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":13,"official_url":14,"link_label":15,"note":16,"updated_at":17},"mitre-attack","t1610","T1610","Deploy Container",5,"MITRE","**What attackers do.** Attackers deploy a container into an environment to run their tools or evade defences, for example a container with a malicious image or with broad access to the host. This serves Defence Evasion and Execution.\n\n**How to defend.** Restrict who can deploy containers, require images from trusted registries, scan images, and use admission control policies that block privileged containers and host mounts. Protect container runtime APIs and orchestration dashboards from unauthenticated access. Collect audit logs from orchestration platforms and container runtimes so deployments can be traced to an identity. Runtime security tools can watch container behaviour after it starts.\n\n**Signs to look for.** Look for containers from unknown images or registries, new deployments by unusual accounts, containers with privileged settings and access to exposed container APIs from the internet. A common gap is exposed container management interfaces without authentication.","Adversaries may deploy a container into an environment to facilitate execution or evade defenses. In some cases, adversaries may deploy a new container to execute processes associated with a particular image or deployment, such as processes that execute or download malware. In others, an adversary may deploy a new container configured without network rules, user limitations, etc. to bypass existing defenses within the environment. In Kubernetes environments, an adversary may attempt to deploy a privileged or vulnerable container into a specific node in order to Escape to Host and access other containers running on the node. \n\nContainers can be deployed by various means, such as via Docker's `create` and `start` APIs or via a web application such as the Kubernetes dashboard or Kubeflow.  In Kubernetes environments, containers may be deployed through workloads such as ReplicaSets or DaemonSets, which can allow containers to be deployed across multiple nodes. Adversaries may deploy containers based on retrieved or built malicious images or from benign images that download and execute malicious payloads at runtime.","© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation (MITRE ATT&CK®).","https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1610\u002F","Open the technique on MITRE ATT&CK",null,"2026-10-18T15:18:43.663+00:00",{"total":9,"list":19},[20,24,28,32,36],{"slug":21,"title":22,"published_at":23},"critical-rce-dns-wallet-theft-container-escape-self-healing-malware-highlight-diverse-threat-week","Critical RCE, DNS Wallet Theft, Container Escape & Self-Healing Malware Highlight Diverse Threat Week","2026-10-15T20:20:52.553+00:00",{"slug":25,"title":26,"published_at":27},"ai-powered-botnet-exploits-exposed-docker-hosts-to-steal-credentials","AI-Powered Botnet Exploits Exposed Docker Hosts to Steal Credentials","2026-09-28T22:21:13.3+00:00",{"slug":29,"title":30,"published_at":31},"exposed-docker-daemons-hijacked-by-ai-powered-telegram-botnet","Exposed Docker Daemons Hijacked by AI-Powered Telegram Botnet","2026-09-28T19:22:07.687+00:00",{"slug":33,"title":34,"published_at":35},"ai-powered-carbonato-botnet-hijacks-exposed-docker-hosts","AI-Powered Carbonato Botnet Hijacks Exposed Docker Hosts","2026-09-24T22:21:47.499+00:00",{"slug":37,"title":38,"published_at":39},"ai-sandbox-escape-exposes-c2-style-control-risk-in-chatgpt","AI Sandbox Escape Exposes C2-Style Control Risk in ChatGPT","2026-08-06T22:20:41.285+00:00",[41,46,51,56,60,64],{"slug":42,"name":43,"problem":44,"stories":45},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",4,{"slug":47,"name":48,"problem":49,"stories":50},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",2,{"slug":52,"name":53,"problem":54,"stories":55},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",1,{"slug":57,"name":58,"problem":59,"stories":55},"patch-management","Automated patch management","Known holes get closed in days, not months.",{"slug":61,"name":62,"problem":63,"stories":55},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":65,"name":66,"problem":67,"stories":55},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[69,74,79,84,88,93,97,101],{"family":70,"item":71,"code":72,"title":73,"together":9},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":75,"item":76,"code":77,"title":78,"together":45},"nist-sp","800-190","SP 800-190","SP 800-190: Application Container Security Guide",{"family":80,"item":81,"code":82,"title":83,"together":45},"nist-800-53","cm-6","CM-6","Configuration Settings",{"family":70,"item":85,"code":86,"title":87,"together":45},"12","Control 12","Network Infrastructure Management",{"family":70,"item":89,"code":90,"title":91,"together":92},"13","Control 13","Network Monitoring and Defense",3,{"family":80,"item":94,"code":95,"title":96,"together":92},"ac-3","AC-3","Access Enforcement",{"family":80,"item":98,"code":99,"title":100,"together":50},"si-3","SI-3","Malicious Code Protection",{"family":5,"item":102,"code":103,"title":104,"together":55},"t1071","T1071","Application Layer Protocol"]