How to secure your cloud credentials against AndroxGh0st

On January 16, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) sent out a Cybersecurity Advisory (CSA) about active threat actors deploying the AndroxGh0st malware. This is significant as cyber criminals are actively using this malware to target Laravel (CVE-2018-15133) (an open source PHP framework).env files and obtain credentials for various high profile applications like Office365, SendGrid, and Twilio. 

The joint advisory committee recommends security teams to implement specific controls to …

advisory agency androxgh0st androxgh0st malware bureau cisa cloud credentials criminals csa cve cyber cyber criminals cybersecurity cybersecurity advisory env fbi federal federal bureau of investigation framework infrastructure infrastructure security investigation january laravel malware open source php security target threat threat actors