Cybercriminal group TeamTNT is leveraging compromised Amazon Web Services credentials to attack cloud environments, a Palo Alto report says. The cybercriminal gang is also targeting the credentials of 16 other cloud-based applications, including Google Cloud, Docker, GitHub, Shodan, Pidgin, Filezilla, HexChat and Project Jupyter. An AWS spokesperson told Information Security Media Group that the reported activity was not a vulnerability on AWS. Microsoft Azure, Alibaba Cloud, Oracle Cloud and IBM Cloud IAM may also have been targeted using similar methods.”]
Source: https://www.bankinfosecurity.com/teamtnt-reportedly-eyes-credentials-aws-google-cloud-others-a-16854