AMBERSQUID hides in the depths. [Research Saturday]

Sysdig's Alessandro Brucato and Michael Clark join Dave to discuss their work on "AWS's Hidden Threat: AMBERSQUID Cloud-Native Cryptojacking Operation." Attackers are targeting what are typically considered secure AWS services, like AWS Fargate and Amazon SageMaker. This means that defenders generally aren’t as concerned with their security from end-to-end.
The research states "The AMBERSQUID operation was able to exploit cloud services without triggering the AWS requirement for approval of more resources, as would be the case if they only spammed …

amazon attackers aws aws fargate cloud cloud-native cryptojacking dave defenders discuss end end-to-end fargate hidden michael research sagemaker security services states sysdig targeting threat work