HACKERS TARGET AWS ROOT ACCOUNTS AT 150+ ORGANIZATIONS WITH PASSWORD SPRAYING ATTACK

Summary from the TLDR InfoSec newsletter

Datadog Security Labs uncovered a password spraying campaign targeting AWS root accounts. Datadog stated that it has not identified a successful login yet, making the attacker's motive unclear. AWS root account logins require an account email, so it is possible that the attackers have access to a dataset or exposed email addresses that they are using in their campaign.