PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

Cybersecurity researchers have disclosed details of a new credential theft framework called PCPJack that targets exposed cloud infrastructure and removes artifacts associated with TeamPCP from affected environments. The toolset steals credentials from cloud, container, developer, productivity, and financial services platforms, then sends the data to attacker-controlled infrastructure.