Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints AheadThe Hacker News·Aug 23, 11:52 UTC · Aug 23, 2023Malware42
Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructureCisco Talos·Jan 12, 13:02 UTC · Jan 12, 2022Malware30
ShadowV2 Botnet Exposes Rise of DDoS-as-aInfosecurity Magazine·Sep 24, 16:00 UTC · Sep 24, 2025Malware30
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-forThe Hacker News·Sep 23, 12:30 UTC · Sep 23, 2025Malware130
Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software ListingsThe Hacker News·May 20, 08:07 UTC · May 20, 2025Malware55
Threat actor abuses Gophish to deliver new PowerRAT and DCRATCisco Talos·Oct 22, 10:00 UTC · Oct 22, 2024Malware30
New spam botnet Horabot targets Latin AmericaSecurity Affairs·Jun 2, 18:55 UTC · Jun 2, 2023Malware30
Hackers Use Cloud Services to Distribute Nanocore, Netwire, and AsyncRAT MalwareThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2022Malware42
iboss adds new features to its Cloud Platform to give organizations more visibility and controlHelp Net Security·Aug 18, 00:00 UTC · Aug 18, 2021Malware30
Global Dating App Users Exposed in Multiple Security SnafusInfosecurity Magazine·Jul 3, 09:30 UTC · Jul 3, 2020Malware42
Lampion malware v2 February 2020 ... ... ... ... ... ... ... ...Security Affairs·Feb 24, 21:40 UTC · Feb 24, 2020Malware30
Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access TrojanThe Hacker News·Aug 7, 07:31 UTC · Aug 7, 2023Malware42
Attackers can turn AWS SSM agents into remote access trojansHelp Net Security·Aug 5, 09:19 UTC · Aug 5, 2023Malware42
An AI gateway designed to steal your dataKaspersky Securelist·Mar 27, 13:36 UTC · Mar 27, 2026Malware42
FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs MalwareThe Hacker News·Jun 11, 10:15 UTC · Jun 11, 2025Malware42
Compromised Cloud Compute Credentials: Case Studies From the WildPalo Alto Unit 42·Jun 5, 17:10 UTC · Jun 5, 2024Malware42
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud CredentialsThe Hacker News·Mar 21, 12:48 UTC · Mar 21, 2024MalwareCVE-2021-41773CVE-2017-9841CVE-2018-15133160
Thousands of Elasticsearch installs compromised to host PoS MalwareSecurity Affairs·Oct 2, 09:28 UTC · Oct 2, 2017Malware30
Threat Actors Use AWS SSM Agent as a Remote Access TrojanInfosecurity Magazine·Aug 2, 17:00 UTC · Aug 2, 2023Malware30
New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS PlatformsThe Hacker News·Jan 11, 14:00 UTC · Jan 11, 2024Malware30
Veeam expands leadership in cloud data managementHelp Net Security·Jan 24, 00:00 UTC · Jan 24, 2019Malware55
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 HoursThe Hacker News·Mar 11, 14:37 UTC · Mar 11, 2026Malware42
Unsecured Elasticsearch servers turned into PoS malware C&CsHelp Net Security·Apr 20, 09:33 UTC · Apr 20, 2026Malware30