Threat Actor
JavaGhost
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (1)
- Reported to exploit exposed AWS access keys to hijack Amazon SES and WorkMail for phishing and establish cross-account access through IAM roles. Toc Consulting’s 2026 AWS Security Report Examines IAM and Agentic AI Risks
CVE (3)
People (1)
MITRE ATT&CK (8)
Vendors (2)
Products (14)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.