Qubole AWS credentials abused to assume customer roles and steal data
Attackers used Qubole's AWS account (805246085872) to assume customer IAM roles and steal data between October 14 and October 26. Impacted organizations should check CloudTrail logs for suspicious AssumeRole requests and rotate all accessed secrets immediately.
2 min