PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
A new credential theft framework called PCPJack, which targets vulnerable cloud infrastructure and removes any artifacts connected to TeamPCP from the environments, has been revealed by cybersecurity researchers.
According to a report released today by SentinelOne security researcher Alex Delamotte, the toolset collects credentials from cloud, container, developer, productivity, and financial services, then exfiltrates the data through infrastructure under attacker control while trying to spread to more hosts.
PCPJack is specifically made to target cloud services such as Docker, Kubernetes, Redis, MongoDB, RayML, and susceptible web apps. This enables the operators to move laterally throughout the compromised networks and propagate like a worm.
It is determined that the ultimate ...