Operators of the LemonDuck botnet are targeting Docker instances in a cryptocurrency mining campaign.