Skip to content
Threat Feed
Subscribe

Product

AWS (Credentials/Config Files)

1 brief RSS
high threat

Detection of AWS Credential Exfiltration via Linux Curl

The TeamTNT threat group leverages the curl utility to exfiltrate sensitive AWS credential and configuration files to remote attacker-controlled servers.

AWS TeamTNT exfiltration linux living-off-the-land
1r 1t