Product
TeamCity Server
- First Reported
- Sep 29, 2026
- Latest Reported
- Sep 29, 2026
Reported Context (1)
- For the past month, svc_automation had operated exclusively from three Amazon-owned IPs, using TeamCity Server and aws-sdk-go user agents, performing routine CI/CD operations like GetSessionToken, AssumeRole to Wiz Blue Agent Traces AWS and GitHub Data Exfiltration Attack
MITRE ATT&CK (7)
Vendors (2)
Products (9)
Tools (5)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.