⤷ Title: Cloud Abuse: TruffleNet BEC Campaign Hijacks AWS SES and Portainer to Orchestrate 800+ Malicious Hosts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:37:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AWS SES #BEC #Cloud Abuse #Portainer #Stolen Credentials #Supply Chain #TruffleNet
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:37:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AWS SES #BEC #Cloud Abuse #Portainer #Stolen Credentials #Supply Chain #TruffleNet
Daily CyberSecurity
Cloud Abuse: TruffleNet BEC Campaign Hijacks AWS SES and Portainer to Orchestrate 800+ Malicious Hosts
Fortinet exposed TruffleNet, a massive BEC campaign using stolen AWS keys to exploit Amazon SES for email fraud. It abuses Portainer as a C2 and uses TruffleHog for reconnaissance.