Do Son Rapid7 identified the Crimson Collective using TruffleHog to find leaked AWS IAM keys. The group achieves Admin access to steal data from RDS/S3 and extort victims.
Crimson Collective
Red Hat confirmed a breach of its consulting arm's GitLab instance. Hackers stole 570 GB of data, including Customer Engagement Reports that detail client network infrastructure.