# pcpjack

Published articles for pcpjack.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

DevFeed: [PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale](<https://devfeed.tech/articles/pcpjack-cloud-worm-evicts-teampcp-and-steals-credentials-at-scale-8311.md>)

Original publisher: [Read original article](<https://www.sentinelone.com/labs/cloud-worm-evicts-teampcp-and-steals-credentials-at-scale/>)

Author: Alex Delamotte

Published: 2026-05-07T10:00:17Z

Content type: article

Language: en

Sources: [SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms.](<https://devfeed.tech/sources/sentinellabs-we-are-hunters-reversers-exploit-developers-and-tinkerers-shedding-light-on-the-world-of-malware-exploits-apts-and-cybercrime-across-all-platforms.md>)

Topics: [pcpjack](<https://devfeed.tech/topics/pcpjack.md>), [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [Security](<https://devfeed.tech/topics/security.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [MongoDB](<https://devfeed.tech/topics/mongodb.md>), [Redis](<https://devfeed.tech/topics/redis.md>), [VirusTotal](<https://devfeed.tech/topics/virustotal.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>)

Tags: [cloud](<https://devfeed.tech/tags/cloud.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [database](<https://devfeed.tech/tags/database.md>), [docker](<https://devfeed.tech/tags/docker.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [malware](<https://devfeed.tech/tags/malware.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [pcpjack](<https://devfeed.tech/tags/pcpjack.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [redis](<https://devfeed.tech/tags/redis.md>), [security](<https://devfeed.tech/tags/security.md>), [teampcp](<https://devfeed.tech/tags/teampcp.md>), [virustotal](<https://devfeed.tech/tags/virustotal.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

SentinelLABS describes PCPJack as a credential-theft framework that spreads across exposed cloud infrastructure, removes TeamPCP-related artifacts, harvests credentials from cloud, container, developer, productivity, and financial services, and exfiltrates the data. The framework targets services including Docker, Kubernetes, Redis, MongoDB, and vulnerable web applications, with suspected monetization through fraud, spam, extortion, or resale of stolen access rather than cryptomining.

### Source excerpt

Cloud attack framework skips cryptomining, harvests financial, messaging, and enterprise credentials for fraud, spam, and potential extortion.