Skip to content
Threat Feed
Subscribe

Tag

Ami

3 briefs RSS
high advisory

AWS EC2 AMI Shared with Another Account

Adversaries with existing AWS access may exfiltrate sensitive data by sharing Amazon Machine Images (AMIs) containing secrets, bash histories, or code artifacts with external, attacker-controlled AWS accounts, detectable via `ModifyImageAttribute` actions in AWS CloudTrail logs.

Amazon EC2 +2 cloud aws exfiltration ami
1r 1t 4i
medium advisory

AWS EC2 AMI Shared with Another Account for Potential Exfiltration

An AWS Amazon Machine Image (AMI) being shared with another AWS account could indicate data exfiltration, as AMIs may contain sensitive data, and unauthorized sharing can lead to exposure.

AWS EC2 aws ami exfiltration
2r 1t
high advisory

AWS AMI Attribute Modification for Data Exfiltration

An attacker modifies AWS AMI attributes, potentially sharing an AMI with another AWS account or making it publicly accessible, to exfiltrate sensitive data stored in AWS resources.

Amazon Elastic Compute Cloud aws ami data-exfiltration cloudtrail
2r 1t