New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms
ID: 6781ad8b-b47b-5f2f-a7e9-8eb93bcc7ebf
STIX ID: report--6781ad8b-b47b-5f2f-a7e9-8eb93bcc7ebf
Feed Name: The Hacker News
Threat Score
SentinelOne researchers disclosed FBot, a Python-based cloud hacking tool used to harvest credentials and hijack SaaS/cloud accounts (including AWS, Microsoft 365, PayPal, SendGrid and Twilio). FBot can generate API keys, check AWS SES and EC2 quotas, extract Laravel environment credentials, validate PayPal accounts via a third-party site, and appears in samples from July 2022 through January 2024, indicating active use and potential monetization by selling access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.