Learning From the Honeypot: A Researcher and a Duplicitous Docker Image

One of the patterns the researcher noticed was that certain username/password combinations were associated with specific malicious actions.