I keep getting reports about AMI images in Amazon’s AWS, which come “pre-pwned.” These images typically include for the most part crypto coin miners, but the also include backdoors or more subtle malicious modifications.
Article Link: https://isc.sans.edu/diary/rss/24126