Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms

In this post, we examine two vibe-coded credential harvesting platforms, Loot and UltraVault, and the Amazon Bedrock abuse used to validate stolen secrets.

Summary from Datadog Security Labs.

More in Identity

Cloudflare & Ping Identity: Identity Security in the Era of AI

VideoCloudflare2d agoIdentityAI

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Security Blog2d agoAppSecIdentity

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

The Hacker News2d agoThreat IntelNetworkIdentity

Infostealer riding the AI Train

Check Point Research2d agoThreat IntelIdentityAI

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

Help Net Security2d agoCloudIdentity