Hackers Use New Exploit Technique to Hijack S3 Buckets

It has been discovered that threat actors might take over expired Amazon S3 buckets to serve rogue binaries without changing the actual modules. Malicious binaries exfiltrate the stolen data to the hacked bucket after stealing the user names, passwords, local machine environment variables, and local hostname. The attack was initially noticed when an npm package called […]

The post Hackers Use New Exploit Technique to Hijack S3 Buckets appeared first on GBHackers - Latest Cyber Security News | Hacker News …

amazon amazon aws attack changing cyber-attack data environment expired exploit hacked hackers hijack local machine malicious modules names passwords rogue s3 buckets stealing stolen threat threat actors