AMBERSQUID Cryptojacking Operation: Unusual AWS Services Under Attack

The AMBERSQUID cryptojacking operation targets obscure AWS services like AWS Amplify, AWS Fargate, and Amazon SageMaker, effectively bypassing AWS’s resource approval process to mine cryptocurrency covertly. If AMBERSQUID were to expand its scope to target all AWS regions, it could potentially lead to daily losses exceeding $10,000. To counter such threats, organizations must intensify vigilance, deploy robust monitoring systems, and enforce strict access controls.