Pro-Ocean (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 12:38:25 UTC elf.pro_ocean (Back to overview) Pro-Ocean Actor(s): Rocke Unit 42 describes this as a malware used by Rocke Group that deploys an XMRig miner. References 2021-02-03 ⋅ Seguranca Informatica ⋅ Pedro Tavares New cryptojacking malware called Pro-Ocean is now attacking Apache, Oracle and Redis servers Pro-Ocean 2021-01-28 ⋅ Palo Alto Networks Unit 42 ⋅ Aviv Sasson Pro-Ocean: Rocke Group’s New Cryptojacking Malware Pro-Ocean There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/elf.pro_ocean https://malpedia.caad.fkie.fraunhofer.de/details/elf.pro_ocean Page 1 of 1