Katie Knowles

New attack technique: Lateral movement through GCP Serial Console

1

Login via Serial Ports: GCP https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/gcp

Modify Startup Scripts in Metadata: GCP https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/gcp

Use OSLogin to Push SSH Keys: GCP https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/gcp

Update Metadata to Push SSH Keys: GCP: https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/gcp

New attack technique: Use GCP OSConfig (VM Manager) to Execute Code

2

Use VM Manager to Execute Code: GCP https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/gcp

Login via Serial Ports: Azure https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/azure

Modify Startup Scripts in Custom Data: Azure https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/ Suggested tags: kind/new-technique, platform/azure

New attack technique: Login via AWS EC2 Serial Console

1

Login via Serial Ports: AWS https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/