The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to compromised credentials.
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
Summary + source link. No paywalls, no tracking.