Hacker News Reader

If the web UI is exposed that could explain how it got infected:

In my case, web UI was behind qbittorrent auth + authelia, haven't seen suspected logs that would trace it back to that, really interesting though!

Can you check the contents of your qBittorrent.conf for any suspicious commands?

It's 100% your system that caused the issue not hotio's container and there is no miner that exists

Perhaps take a class in sarcasm?