
How Compromised IAM Credentials Fuelled a Major AWS Crypto Mining Operation
An ongoing cybersecurity campaign is targeting Amazon Web Services (AWS) customers by exploiting compromised Identity and Access Management (IAM) credentials to facilitate cryptocurrency mining. The campaign was first identified by Amazon’s GuardDuty on November 2, 2025, and has since showcased




