blueteamsecEnglish · 3 years ago

Hijacking S3 Buckets: New Attack Technique

1

cross-posted to:
netsec@lemmy.world

2

Hijacking S3 Buckets: New Attack Technique

blueteamsecEnglish · 3 years ago

1

cross-posted to:
netsec@lemmy.world

Without altering a single line of code, attackers poisoned the NPM package “bignum” by hijacking the S3 bucket serving binaries necessary for its function and replacing them with malicious ones

Chat

Capt. AIn
link
fedilink
English
arrow-up
1·
3 years ago
The full title makes more sense

Hijacking S3 Buckets: New Attack Technique Exploited in the Wild by Supply Chain Attackers

Because hijacking S3 buckets isn’t new, but maybe the context is?

blueteamsec

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

23 users / day
113 users / week
271 users / month
872 users / 6 months
218 local subscribers
582 subscribers
1.81K Posts
147 Comments
Modlog

mods:
digicat