[justinl33]

a simple docker run --memory=512m --cpus=1 could have at least limited the damage here.

[Pooge]

I don't think so; it would have made the malware harder to spot.