Amazon CloudFront

Reported Context (4)

On CloudFront, raise the body inspection limit to 64 KB. PHP2Shell: Emergency PHP Fixes and Detection Guidance for Two Critical RCE Flaws
a WebSocket connection, which means both the DERP relay servers and the control plane can sit behind CloudFront or Fastly without any special handling. BOFScale Runs Tailscale In-Memory to Route C2 Traffic Through CDN-Fronted WebSockets
More recent spoofed download sites continue to separate the spoofed websites from the hosted files by using Amazon’s CloudFront content delivery network such as the following: DomainTools Details 1,100+ Suspected Domains Used for Data Collection and Malware Delivery
example, the homepage for a webserver might be hosted out of one AWS region, such as us-east-1, but Amazon CloudFront might be used to cache parts of that homepage in its 600+ locations. This idea works great when a How CloudFront Request Collapsing Can Expose Users’ Data—and How to Prevent It

CVE (2)

Malware (2)

People (1)

MITRE ATT&CK (15)

Vendors (6)

Products (24)

Tools (10)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.