AMAZON ECS IS THE NEW EC2 FOR CRYPTO MINING

Summary from the TLDR InfoSec newsletter

A post from DataDog that walks through two different attack scenarios that it has observed. In the first scenario, an attacker enumerated their credentials, established persistence, attempted to move laterally, and finally attempted to run a large EC2 instance in an unused region before being blocked. In the second scenario, the attacker immediately launched crypto mining tasks on ECS Fargate with 25 tasks in 17 regions, showing that this method can be much more effective.