
A sophisticated extortion campaign has recently targeted 110,000 domains by exploiting exposed .env files on unsecured web applications, leading to significant data breaches and potential ransom scenarios. These .env files, critical for web application configuration, often contain sensitive credentials such as AWS IAM access keys. The attackers used these keys to create new IAM roles and policies with elevated privileges,








