New cloud worm “PCPJack” targets exposed infrastructure for credential theft.• Docker & Kubernetes targeted• API keys and SSH secrets harvested• Telegram-based C2 observed• No cryptomining payloads

[technadu@infosec.exchange]

New cloud worm “PCPJack” targets exposed infrastructure for credential theft.
• Docker & Kubernetes targeted
• API keys and SSH secrets harvested
• Telegram-based C2 observed
• No cryptomining payloads

https://www.technadu.com/cloud-credential-worm-pcpjack-targets-teampcp-victims/627541/

Are credential-focused cloud attacks the new norm?

#InfoSec #CloudSecurity #CyberSecurity