Amazon S3

Reported Context (2)

to log the download event, and also sends a request to downloadUrl to download the payload from an Amazon S3 bucket. FamousSparrow Deploys New SquawkDoor Backdoor and Updated SparrowDoor
Inline policies include wildcard actions like s3:*, which may unintentionally allow full access to sensitive services such as Amazon S3. Overly Broad AWS Default Roles Could Enable Cross-Service Privilege Escalation

Malware (7)

People (3)

Threat Actors (12)

MITRE ATT&CK (24)

Vendors (5)

Products (12)

Tools (4)

Industries (6)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.