Skip to content
Threat Feed
Subscribe

Tag

Sns

3 briefs RSS
low advisory

AWS SNS Rare Protocol Subscription by User

A user subscribing to an SNS topic using a new protocol may indicate data exfiltration or unauthorized access by an adversary aiming to collect sensitive information or exfiltrate data.

Simple Notification Service cloud aws sns exfiltration
2r 4t
medium advisory

AWS SNS Topic Message Publish by Rare User

This rule identifies when an SNS topic message is published by a rare user in AWS, which may indicate lateral movement, data exfiltration, or phishing campaigns, potentially leading to resource hijacking and impact on cloud services.

Amazon Simple Notification Service aws sns lateral-movement exfiltration impact
2r 4t
low advisory

AWS SNS Topic Created by Rare User

An AWS SNS topic was created by a user who does not typically perform this action, potentially indicating resource development for data exfiltration or other malicious activities.

Simple Notification Service cloud aws sns resource-development impact
2r 2t