CloudGoat detection_evasion Scenario: Avoiding AWS Security Detection and Response

The post CloudGoat detectionevasion Scenario: Avoiding AWS Security Detection and Response appeared first on Rhino Security Labs...

Malicious Package

pygrata-utils is a malicious package. The library attempts to harvest and upload the AWS credentials, network interface information and environment variables to a remote endpoint: "hxxp://graph.pygrata.com:8000/upload."...

Malicious Package

hkgsolutils is a malicious package. The library attempts to exfiltrate and upload the AWS credentials, network interface information and environment variables to one or more endpoints exposed to public...

Malicious Package

pygrata is a malicious package. The library attempts to exfiltrate and upload the AWS credentials, network interface information and environment variables to one or more endpoints hosted on the PyGrata domain...

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly exposed endpoint. The list of packages includes loglib-modules, pyg-modules, pygrata,...

Malicious Package

Overview node-red-contrib-aws-stream-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerab...

Malicious Package

Overview red-contrib-aws-stream-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Critical Photon OS Security Update - PHSA-2022-0409

Updates of 'linux-esx', 'linux-secure', 'linux-aws', 'linux-rt', 'linux', 'httpd' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-3.0-0409

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'httpd' packages of Photon OS have been released...

Azure vs. AWS Developer Tools

Both AWS and Azure developer tools provide key efficiencies in your DevOps environment, learn the comparison between tools, any overlap, and use cases for both...

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no fewer than 100 million people in the 2019 Capital One breach. Paige Thompson, who operated under the online alias "erratic" and worked for the tech...

Important Photon OS Security Update - PHSA-2022-4.0-0201

Updates of 'linux-esx', 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

MAL-2022-1194 Malicious code in aws-data-api-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e36620b1bbf035669a206034da9186c8aa8a8926a9288ee9fd34545aa6fc9ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-solutions-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d87219753522203f4379f860232eca25a18796c1ba879d9b3eca269fbd762c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1203 Malicious code in aws-solutions-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d87219753522203f4379f860232eca25a18796c1ba879d9b3eca269fbd762c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-workbench-on-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e79e6a9fa253af3c134094d12d65a80627e7a4eab19ab1cdfc2182b1cbd9008c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-data-api-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e36620b1bbf035669a206034da9186c8aa8a8926a9288ee9fd34545aa6fc9ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6033 Malicious code in service-workbench-on-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e79e6a9fa253af3c134094d12d65a80627e7a4eab19ab1cdfc2182b1cbd9008c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-amplify-unicorntrivia-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ed06bee8e811d379842b46440e9174027b9d4ece63560f9ddc88cd44ae0102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1196 Malicious code in aws-delivlib-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e32519bdca9531e7178bf6e327829361c7be2d1a1e53a816e99a00325b28664d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...