Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints AheadThe Hacker News·Aug 23, 11:52 UTC · Aug 23, 2023Malware42
Attackers can turn AWS SSM agents into remote access trojansHelp Net Security·Aug 5, 09:19 UTC · Aug 5, 2023Malware42
Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access TrojanThe Hacker News·Aug 7, 07:31 UTC · Aug 7, 2023Malware42
WhatsApp: AWS leased infrastructure to NSO Group beginning in 2018The Record·Jul 17, 00:50 UTC · Jul 17, 2024Malware30
Short-term AWS access tokens allow attackers to linger for a longer whileHelp Net Security·Apr 20, 08:40 UTC · Apr 20, 2026Malware30
Duo Security now offering enhanced MFA support for AWSHelp Net Security·Jun 27, 00:00 UTC · Jun 27, 2019Malware30
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 HoursThe Hacker News·Mar 11, 14:37 UTC · Mar 11, 2026Malware42
TeamTNT is the first cryptomining bot that steals AWS credentialsSecurity Affairs·Aug 18, 07:01 UTC · Aug 18, 2020Malware130
AWS unveils new and improved security featuresHelp Net Security·Apr 20, 08:40 UTC · Apr 20, 2026Malware30
Threat Actors Use AWS SSM Agent as a Remote Access TrojanInfosecurity Magazine·Aug 2, 17:00 UTC · Aug 2, 2023Malware30
Researcher finds cryptomining malware targeting AWS LambdaThe Record·Jan 13, 00:00 UTC · Jan 13, 2023Malware30
ShieldX adds lateral movement prevention to the Elastic Security Platform for AWSHelp Net Security·Apr 24, 00:00 UTC · Apr 24, 2019Malware30
FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs MalwareThe Hacker News·Jun 11, 10:15 UTC · Jun 11, 2025Malware42
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HRHelp Net Security·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-21262CVE-2026-26127160
Updated cryptojacking worm steals AWS credentialsHelp Net Security·Jan 8, 13:25 UTC · Jan 8, 2024Malware130
AWS adds new S3 security and access control featuresHelp Net Security·Oct 6, 00:00 UTC · Oct 6, 2020Malware30
Asavie IoT Connect service expedites enterprise IoT projectsHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2019Malware55
Veeam expands leadership in cloud data managementHelp Net Security·Jan 24, 00:00 UTC · Jan 24, 2019Malware55
CISA Admin Leaked AWS GovCloud Keys on GithubKrebs on Security·May 20, 23:14 UTC · May 20, 2026Malware42
Feds Warn of AndroxGh0st Botnet Targeting AWS, Azure, and Office 365 CredentialsThe Hacker News·Jan 18, 08:54 UTC · Jan 18, 2024MalwareCVE-2017-9841CVE-2021-41773CVE-2018-1513335
First Malware Targeting AWS Lambda Serverless Platform DiscoveredThe Hacker News·Apr 8, 01:47 UTC · Apr 8, 2022Malware30
TeamTNT botnet now steals Docker API and AWS credentialsSecurity Affairs·Jan 10, 10:22 UTC · Jan 10, 2021Malware142
Compromised Cloud Compute Credentials: Case Studies From the WildPalo Alto Unit 42·Jun 5, 17:10 UTC · Jun 5, 2024Malware42
State-Backed HazyBeacon Malware Uses AWS Lambda to Steal Data from SE Asian GovernmentsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware42
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream noticeArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2024Malware55
Legion Malware Upgraded to Target SSH Servers and AWS CredentialsThe Hacker News·May 24, 10:00 UTC · May 24, 2023Malware30
Week in review: Kali Linux 2020.4, AWS Network Firewall, speeding up malware analysisHelp Net Security·Nov 22, 00:00 UTC · Nov 22, 2020Malware55
BlueCat Adaptive DNS gives network teams visibility over AWS resources and threat protectionHelp Net Security·May 8, 00:00 UTC · May 8, 2020Malware55
AWS Blames North Korean Group for npm Supply Chain AttacksInfosecurity Magazine·Jul 31, 09:50 UTC · Jul 31, 2026Malware42
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ StoriesThe Hacker News·Jan 1, 15:52 UTC · Jan 1, 2026MalwareCVE-2023-26359CVE-2023-38205CVE-2023-44353+7 CVEs47
OneClik APT campaign targets energy sector with stealthy backdoorsSecurity Affairs·Jun 27, 13:01 UTC · Jun 27, 2025Malware42
Alert: Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHubThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024Malware30
AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud ServicesThe Hacker News·Mar 30, 10:26 UTC · Mar 30, 2023Malware130
An AI gateway designed to steal your dataKaspersky Securelist·Mar 27, 13:36 UTC · Mar 27, 2026Malware42
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-forThe Hacker News·Sep 23, 12:30 UTC · Sep 23, 2025Malware130
Organizations Warned of New Attack Vector in Amazon Web ServicesInfosecurity Magazine·Dec 20, 16:30 UTC · Dec 20, 2022Malware30
Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and KeysThe Hacker News·Jun 27, 05:58 UTC · Jun 27, 2022Malware42