AWS EC2

Reported Context (1)

1 state file show a consistent target profile: cloud-hosted Linux servers running web applications. AWS EC2 instances (ip-172-31-*), GCP managed instance groups, and Azure-hosted VMs all appear. Named servers such PCPJack Used 230 Cloud Linux Servers in a Hidden SMTP Relay Network

CVE (1)

People (1)

Threat Actors (2)

MITRE ATT&CK (12)

Vendors (3)

Products (3)

Tools (5)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.