Browsing Tag
AWS
86 posts
New Codefinger Ransomware Exploits AWS to Encrypt S3 Buckets
The Halcyon RISE Team has identified a new Codefinger ransomware campaign targeting Amazon S3 buckets. This attack leverages…
FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits
Researchers at FortiGuard Labs have identified a prolific attacker group known as "EC2 Grouper" who frequently exploits compromised credentials using AWS tools.
Hackers Use Fake PoCs on GitHub to Steal WordPress Credentials, AWS Keys
SUMMARY Datadog Security Labs’ cybersecurity researchers have discovered a new, malicious year-long campaign from a threat actor identified…
Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years
The malicious Python package “Fabrice” on PyPI mimics the “Fabric” library to steal AWS credentials, affecting thousands. Learn how…
EMERALDWHALE Steals 15,000+ Cloud Credentials, Stores Data in S3 Bucket
Operation EMERALDWHALE compromises over 15,000 cloud credentials, exploiting exposed Git and Laravel files. Attackers use compromised S3 buckets…
Russian Cozy Bear Hackers Phish Critical Sectors with Microsoft, AWS Lures
Russian state-sponsored hackers Cozy Bear are targeting over 100 organizations globally with a new phishing campaign. This sophisticated…
ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk
ALBeast is a critical vulnerability that allows attackers to bypass authentication and authorization in AWS ALB-based applications. Learn…
Black Hat USA 2024: AWS ‘Bucket Monopoly’ Flaw Led to Account Takeover
Black Hat USA 2024 is up and running at full pace as critical AWS vulnerabilities are exposed! Learn…
In the jungle of AWS S3 Enumeration
Amazon Web Services (AWS) Simple Storage Service (S3) is a foundational pillar of cloud storage, offering scalable object…
One Phish, Two Phish, Red Phish, Blue Phish
One of the interesting things about working for a cybersecurity company is that you get to talk to…