TeamTNT's Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud

A malicious actor has been linked to a cloud credential stealing campaign in June 2023 that's focused on Azure and Google Cloud Platform (GCP) services, marking the adversary's expansion in targeting beyond Amazon Web Services (AWS).
The findings come from SentinelOne and Permiso, which said the "campaigns share similarity with tools attributed to the notorious TeamTNT cryptojacking crew,"

actor adversary amazon amazon web services aws azure beyond campaign campaigns cloud cloud platform credential credential stealing expansion findings gcp google google cloud google cloud platform june june 2023 malicious permiso platform sentinelone services share similarity stealing targeting teamtnt web web services