Exposed: Sophisticated AWS Credential Theft Campaign Exploits EC2 Vulnerabilities

A sophisticated campaign targeting AWS EC2 instances exploited SSRF vulnerabilities to steal sensitive metadata, including IAM credentials, from IMDSv1 endpoints. Operating from France and Romania between March 13-25, 2025, attackers systematically probed vulnerable websites hosted on EC2 ...