Attackers used stolen high‑privilege IAM credentials to rapidly deploy large‑scale cryptomining on EC2 and ECS They launched GPU‑heavy auto‑scaling groups, malicious Fargate containers, new IAM users, ...
Credential theft soared in the second half of 2025, thanks in part to the industrialization of infostealer malware and ...