Product
RDS
- First Reported
- Oct 13, 2022
- Latest Reported
- Sep 4, 2024
Reported Context (3)
- directions very quickly. Within hours, they began exfiltrating data from S3 storage buckets and sensitive RDS databases containing client data, as well as installing reverse shells on EC2 instances in multiple VPCs. Phishing-Led Hybrid Cloud Attack Persisted for More Than 17 Months
- visibility was not possible due to log retention limitations, access to S3 buckets and highly sensitive RDS databases was identified. The full scope of this access and exactly what data was exfiltrated remains Responders Traced a Hybrid Cloud Attack from AWS to a Phishing-Infected Home Computer
- Cleartext private keys and credentials can grant adversaries access to IaaS or PaaS databases (e.g. RDS instances) residing in a compromised VPC, regardless of their public exposure. These types of databases may Wiz outlines cloud VPC lateral-movement risks and five defenses
Malware (1)
MITRE ATT&CK (15)
Vendors (2)
Products (13)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.