Password spraying campaign targets AWS root user accounts across 150+ organizations

Datadog Security LabsAugust 31, 2026Threat Intel Cloud Identity

MentionsAmazon Web Services

Datadog Security Research observed a password spraying campaign attempting to authenticate as the AWS root user across more than 150 organizations.

Summary from Datadog Security Labs.

Read the full article at Datadog Security Labs

Explained

The technology and terms in this story. Learn more

AttackCredential stuffingTrying leaked or common passwords against many accounts until some work.

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Help Net Security1h agoThreat Intel

Sponsored: Should your threat hunt become a detection?

Podcast19 minRisky Business News11h agoThreat Intel

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

Security Affairs17h agoThreat IntelVulnerabilities

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

BleepingComputeryesterdayThreat IntelEndpointVulnerabilities

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

The Hacker NewsyesterdayThreat Intel