FeedMalwareNew PCPJack worm steals credentials, cleans TeamPCP infectio...
MalwareBleeping Computer
10.0CRITICAL

New PCPJack worm steals credentials, cleans TeamPCP infections

📅 7 May 2026 at 18:35 UTC📰 Bleeping ComputerView original source ↗
New PCPJack worm steals credentials, cleans TeamPCP infections

A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the systems. [...]

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

PCPJack is a new malware framework designed for large-scale credential theft, likely monetizing its activity via financial fraud, spam operations, credential resale, or extortion. The threat actor targets cloud infrastructure and developer systems, exploiting known vulnerabilities in services like Docker, Kubernetes, Redis, MongoDB, and vulnerable web applications.

⚙️Technical Details
CVEs
CVE-2025-29927CVE-2025-55182CVE-2026-1357CVE-2025-9501CVE-2025-48703
Affected Systems
DockerKubernetesRedisMongoDBRayMLvulnerable web applications
Attack Vectors
NETWORKNETWORKNETWORKNETWORKNETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Developers and organizations with exposed cloud infrastructure, particularly those using Docker, Kubernetes, Redis, MongoDB, and vulnerable web applications.
🛡️Recommended Actions
1Enforce multi-factor authentication (MFA) for all users
2Use IMDSv2 in AWS to secure cloud environments
3Ensure proper authentication for Docker and Kubernetes services
📦Affected Products
Vercel Next.JsFacebook ReactControl-Webpanel Webpanel
🔐NVD Verified DataVERIFIED
CVE-2025-29927CVSS 9.1CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-863CWE-285
Affected Products (CPE)
Vercel Next.Js
CVE-2026-1357CVSS 9.8CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
CVE-2025-9501CVSS 9CRITICAL
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVE-2025-48703CVSS 9CRITICAL
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-78
Affected Products (CPE)
Control-Webpanel Webpanel

Read the full article

This is a curated summary. The complete article is available at Bleeping Computer.

Read on Bleeping Computer
← Back to feed