Blackrota is targeting a security bug in Docker, but is nearly impossible to reverse-analyze.
Source: Threadpost