Comment by progval

According to their report [1], "critical vulnerabilities" include:

* coin miners, including images designed to mine coins, eg. kannix/monero-miner

* images for "Hacking Tools"

These two categories account for 64% of the 51%.

[1] https://prevasio.com/static/Red_Kangaroo.pdf