Stolen IAM Keys Fuel Massive AWS Cryptomining Operation
December 16, 2025 at 12:00 AM
An ongoing AWS-wide cryptomining campaign is abusing stolen IAM credentials to spin up miners within minutes, Amazon reports. First spotted by GuardDuty and automated monitoring on November 2, 2025, …