A threat actor is using AlienFox to harvest API keys and secrets from cloud service providers, including AWS Simple Email Service, Google Workspace and Microsoft Office 365.
Article Link: AlienFox source code toolset harvests credentials from 18 cloud services | SC Media