Rocke

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

[Rocke](https://attack.mitre.org/groups/G0106) is an alleged Chinese-speaking adversary whose primary objective appeared to be cryptojacking, or stealing victim system resources for the purposes of mining cryptocurrency. The name [Rocke](https://attack.mitre.org/groups/G0106) comes from the email address "rocke@live.cn" used to create the wallet which held collected cryptocurrency. Researchers have detected overlaps between [Rocke](https://attack.mitre.org/groups/G0106) and the Iron Cybercrime Group, though this attribution has not been confirmed.(Citation: Talos Rocke August 2018)

MITRE ATT&CK: View on MITRE
Techniques Used (36)
ID ATT&CK Tactics
T1014 Rootkit -
T1018 Remote System Discovery -
T1021.004 SSH -
T1027 Obfuscated Files or Information -
T1027.002 Software Packing -
T1027.004 Compile After Delivery -
T1036.005 Match Legitimate Resource Name or Location -
T1037 Boot or Logon Initialization Scripts -
T1046 Network Service Discovery -
T1053.003 Cron -
T1055.002 Portable Executable Injection -
T1057 Process Discovery -
T1059.004 Unix Shell -
T1059.006 Python -
T1070.002 Clear Linux or Mac System Logs -
Aliases (103)
Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra Aged Libra
Metadata
ID: 253
Created: 13/01/2026 17:48
Updated: 06/03/2026 04:00