Tag: soco404

1 Attack Reports | 0 Vulnerabilities

Attack reports

Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

A new iteration of a broad cryptomining campaign, dubbed Soco404, has been identified. The attackers exploit vulnerabilities in cloud environments, particularly targeting PostgreSQL misconfigurations, to deploy cryptominers on both Linux and Windows systems. They use process masquerading, achieve p…
persistence
cryptomining
CVE-2025-24813
compromised-servers
2025-07-24
process-masquerading
multiplatform
fake-404-pages
postgresql
crypto-scam
soco404
Published: July 24, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports