Sign up to receive the latest news, cyber threat intelligence and research from Unit 42
Malware Used by “Rocke” Group Evolves to Evade Detection by Cloud Security Products
Palo Alto Networks Unit 42 recently captured and investigated new samples of the Linux coin mining malware used by the Rocke group. The family was suspected to be developed by the Iron cybercrime group and it’s also associated with the Xbash malware we reported on in September of 2018. The threat actor Rocke was originally