TruffleNet Attack Weaponizes AWS Credentials for BEC Campaigns
A sophisticated attack campaign dubbed TruffleNet is systematically compromising AWS environments using stolen credentials and legitimate open-source tools. The infrastructure enables large-scale reconnaissance and downstream business email compromise attacks targeting enterprises.