Tag: identity-center

1 Attack Reports | 0 Vulnerabilities

Attack reports

Tales from the cloud trenches: The Attacker doth persist too much, methinks

A leaked AWS access key led to malicious activities over a 150-minute period, involving five distinct IP addresses. The attackers employed both common and innovative tactics, including creating 'persistence-as-a-service' infrastructure, manipulating AWS Identity Center, and disabling organization-l…
persistence
aws
telegram
2025-05-13
cloud-security
api-gateway
identity-center
iam
lambda
Published: May 13, 2025
Downloadable IOCs: 5
Click here to see more Attack Reports