Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PCPJack Hijacked 230 AWS, GCP, and Azure Servers to Run a Hidden SMTP Relay Network

hunt.io | blog | #cloud | #threat-intelligence | #sliver | #smtp-relay | #proxy-network | #cloud-infrastructure | #chisel

Summary

Hunt.io recovered a 12-file SMTP proxy toolkit from exposed PCPJack infrastructure, showing how 230 hijacked cloud servers were turned into a persistent email relay network with Sliver and Chisel.
Published
Collected

original ↗

Related coverage

blog · netspi.com
2013 Cyber Threat Forecast Released
Reviews the Georgia Tech 2013 cyber threat forecast: cloud botnets, mobile browser and wallet flaws, malware obfuscation, counterfeit hardware in the supply chain, and healthcare data risks.
blog · hunt.io
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia
Hunt.io's SpiceRAT detections linked shared infrastructure across malware families from Bitdefender's SilkParasite report to energy, government, and telecom targets in Central Asia.
blog · hunt.io
Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
Hunt.io parsed a Redis cryptomining botnet's own exposed logs: 3,562 servers compromised, rogue replication as the only technique that scaled, and 72.6% success against a no-auth target list.
blog · hunt.io
Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia
Hunt.io traced five exposed directories to a SecFlow-run campaign that used Claude, Qwen and DeepSeek as workers against government, education and diplomatic targets across Asia.
blog · hunt.io
Targeting Innovation: Sliver C2 and Ligolo-ng Used in Operation Aimed at Y Combinator
Hunt.io reconstructs an intrusion set aimed at Y Combinator that paired Sliver C2 with Ligolo-ng tunnels, illustrating how attackers chain modern open-source tooling for stealthy operations.
blog · hunt.io
Introducing Hunt Advanced Search
Hunt introduces Advanced Search, a query language for malware, certificates and open-directory files, shown via Quasar RAT hunts, Cobalt Strike certificate pivots and JA4X-based Sliver discovery.
back