We recount an extensive cloud extortion campaign leveraging exposed .env files of at least 110k domains to compromise organizations' AWS environments.
Microsoft detected a unique operation where threat actors carried out destructive actions in both on-premises and cloud environments.