The updated version of Pro-Ocean shows how Rocke has steadily increased its ability to develop malware. The new variant offers worming and rootkit capabilities that enable the malicious code to remain undetected and compromise other vulnerable web servers, the Unit 42 report notes. "Cryptojacking malware targeting the cloud is evolving as attackers understand the potential of that environment to mine for crypto coins,” the Unit 42 researchers note. “We previously saw simpler attacks by the Rocke Group, but it seems this group presents an ongoing, growing threat. This cloud-targeted malware is not something ordinary, since it has worm and rootkit capabilities. We can assume that the growing trend of sophisticated attacks on the cloud will continue."