PCPJack targets cloud credentials: tracing propagation and recovering exposed services
SentinelLABS describes a cloud worm that removes TeamPCP artefacts, steals credentials and spreads through exposed services. Recovery must follow identities and connected workloads.