Product
ECS Exec
- First Reported
- Mar 31, 2026
- Latest Reported
- Mar 31, 2026
Reported Context (1)
- The hackers relied on GitHub workflows to execute code within victim environments, and used the ECS Exec feature to execute Bash commands and Python scripts directly on containers running in AWS environments. TeamPCP Uses Stolen Credentials to Target AWS Environments, Wiz Reports
People (1)
Threat Actors (3)
MITRE ATT&CK (5)
Vendors (4)
Products (7)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.