Hackers Abuse AWS SSM Agent to Perform Various Malicious Activities

Legitimate SSM agents can turn malicious when attackers with high-privilege access use it to carry out ongoing malicious activities on an endpoint. Once compromised, the threat actors retain access to the compromised system, allowing ongoing illicit activities on AWS or other hosts. Cybersecurity researchers at Mitiga recently discovered a new AWS post-exploitation technique.  With the […]

The post Hackers Abuse AWS SSM Agent to Perform Various Malicious Activities appeared first on GBHackers - Latest Cyber Security News | Hacker News …

abuse access agent attackers aws compromised cyber security cybersecurity endpoint hackers high malicious mitiga privilege privilege access researchers retain ssm system threat threat actors turn vulnerability