The information pulled this way included AWS customer keys and secrets, database credentials, Git credentials and source code, SMTP credentials (for email sending), API keys for services like ...

The group then exploited exposed endpoints to access sensitive credentials such as database login details, API keys, and AWS secrets. In some cases, remote shell access enabled further penetration ...

Retrieving IAM credentials allows attackers to escalate their privileges and access S3 buckets or control other AWS services, potentially leading to sensitive data exposure, manipulation ...