AWS’s Hidden Threat: AMBERSQUID Cloud-Native Cryptojacking Operation

Originally published by Sysdig.Written by Alessandro Brucato. The Sysdig Threat Research Team (TRT) has uncovered a novel cloud-native cryptojacking operation which they’ve named AMBERSQUID. This operation leverages AWS services not commonly used by attackers, such as AWS Amplify, AWS Fargate, and Amazon SageMaker. The uncommon nature of these services means that they are often overlooked from a security perspective, and the AMBERSQUID operation can cost victims more than $10,000/day.The AMBE...

amazon amazon sagemaker amplify attackers aws aws fargate cloud cloud-native cryptojacking fargate hidden nature novel research sagemaker services sysdig team threat threat research uncommon uncovered written