SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.pro_ocean (Back to overview)

Pro-Ocean

Actor(s): Rocke

Unit 42 describes this as a malware used by Rocke Group that deploys an XMRig miner.

References
2021-02-03 ⋅ Seguranca Informatica ⋅ Pedro Tavares
New cryptojacking malware called Pro-Ocean is now attacking Apache, Oracle and Redis servers
Pro-Ocean
2021-01-28 ⋅ Palo Alto Networks Unit 42 ⋅ Aviv Sasson
Pro-Ocean: Rocke Group’s New Cryptojacking Malware
Pro-Ocean

There is no Yara-Signature yet.