PCPJack Compromises 230 Cloud Servers to Run Hidden SMTP Relay Network
Security firm Hunt.io uncovered that the PCPJack group hijacked 230 AWS, Google Cloud, and Azure instances across three continents, converting them into covert SMTP proxy servers for spam relaying. The actors left open directories on a C2 server, exposing deployment scripts, binaries, and Sliver configurations used to manage the fleet.