What’s the worst place to leave your secrets? – Research into what happens to AWS credentials that are left in public places

TL;DR I deployed canary tokens in various public places on the Internet, logged all access attempts, and discovered intriguing patterns on credential discovery and attack methodologies of threat actors. Canary Tokens Primer Canary tokens are a type ...