Tag: crimson collective

1 Attack Reports | 0 Vulnerabilities

Attack reports

Crimson Collective: A New Threat Group Observed Operating in the Cloud

Over the past few weeks, Rapid7 has observed increased activity of a new threat group attacking AWS cloud environments with the goal of data exfiltration and subsequent extortion of the victim. This threat group refers to itself as ‘Crimson Collective’ and has recently announced that it is behind a…
extortion
exfiltration
aws
trufflehog
iam
2025-10-10
crimson collective
amazon web services
valid accounts
s3 bucket
Published: October 10, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports