Unit 42 describes this as a malware used by Rocke Group that deploys an XMRig miner.
|2021-02-03 ⋅ Seguranca Informatica ⋅ |
New cryptojacking malware called Pro-Ocean is now attacking Apache, Oracle and Redis servers
|2021-01-28 ⋅ Palo Alto Networks Unit 42 ⋅ |
Pro-Ocean: Rocke Group’s New Cryptojacking Malware
There is no Yara-Signature yet.