The Nemesis and ShinyHunters attackers scanned millions of IP addresses to find exploitable cloud-based flaws, though their operation ironically was discovered due to a cloud misconfiguration of their own doing.
First seen on darkreading.com
Jump to article: www.darkreading.com/endpoint-security/cybercrime-gangs-steal-thousands-aws-credentials