AMBERSQUID Cryptojacking Operation: Unusual AWS Services Under Attack
AMBERSQUID Cryptojacking Operation: Unusual AWS Services Under Attack
21 September 2023
The AMBERSQUID cryptojacking operation targets obscure AWS services like AWS Amplify, AWS Fargate, and Amazon SageMaker, effectively bypassing AWS's resource approval process to mine cryptocurrency covertly. If AMBERSQUID were to expand its scope to target all AWS regions, it could potentially lead to daily losses exceeding $10,000. To counter such threats, organizations must intensify vigilance, deploy robust monitoring systems, and enforce strict access controls.