Soco404

Reported Context (1)

Research has identified a new iteration of a broader malicious cryptomining campaign, which we’ve dubbed Soco404 (based on the observed payload name, associated domain, and use of fake error pages). While previous Soco404 Cryptomining Campaign Targets Exposed PostgreSQL Across Linux and Windows

CVE (1)

MITRE ATT&CK (15)

Vendors (2)

Products (4)

Tools (7)

Industries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.