[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXKBGRVNulKZ_EFPDKvSp5YppJYko5Y6-JhhlIWdxNy4":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":10,"country":11,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":20,"technique_count":71,"created_at":72,"seoMetadata":73,"schemaOrg":77},"Rocke","rocke",[9],"Aged Libra","This threat actor initially came to our attention in April 2018, leveraging both Western and Chinese Git repositories to deliver malware to honeypot systems vulnerable to an Apache Struts vulnerability.\nIn late July, we became aware that the same actor was engaged in another similar campaign. Through our investigation into this new campaign, we were able to uncover more details about the actor.",null,[],[],[],[16,17,18,19],"https:\u002F\u002Fblog.talosintelligence.com\u002F2018\u002F08\u002Frocke-champion-of-monero-miners.html","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fmalware-used-by-rocke-group-evolves-to-evade-detection-by-cloud-security-products\u002F","https:\u002F\u002Fwww.intezer.com\u002Fblog-technical-analysis-cryptocurrency-mining-war-on-the-cloud\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fatoms\u002Fagedlibra\u002F",[21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70],"T1071","T1071.001","T1547","T1547.001","T1037","T1059","T1059.004","T1059.006","T1543","T1543.002","T1140","T1190","T1222","T1222.002","T1564","T1564.001","T1574","T1574.006","T1070","T1070.004","T1070.006","T1105","T1036","T1036.005","T1046","T1571","T1027","T1027.002","T1027.004","T1057","T1055","T1055.002","T1021","T1021.004","T1018","T1496","T1496.001","T1014","T1053","T1053.003","T1518","T1518.001","T1082","T1552","T1552.004","T1102","T1102.001","T1685","T1686","T1685.006",50,"2023-08-09T17:25:09.409843+00:00",{"title":74,"metaDescription":75,"keywords":76},"Rocke Threat Actor Profile | EdgeProtect","This threat actor initially came to our attention in April 2018, leveraging both Western and Chinese Git repositories to deliver malware to honeypot s...","Rocke, Aged Libra, threat actor, APT, cyber threat, threat intelligence",{"@context":78,"@type":79,"name":6,"alternateName":80,"description":10,"url":81,"mainEntityOfPage":82},"https:\u002F\u002Fschema.org","Organization",[9],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Frocke",{"@type":83,"@id":81},"WebPage"]