Title: I have been seeing a lot of posts on Reddit and other forums of mostly students setting up an AWS account only for them to be hacked and account owner being stuck with a significant bill.<p>Most likely scenario is hackers are trying leaked username&#x2F;password pairs from other breaches against AWS and gaining access to those accounts.<p>They then spin up EC2 instances in all sorts of regions on the compromised accounts<p>PSA set up MFA on your account if you haven&#x27;t already.<p>Some examples:<p><a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rv3lm5&#x2F;i_lost_55k_from_hackers&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rv3lm5&#x2F;i_lost_55k_from...</a><p><a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rvbncu&#x2F;account_hacked_unable_to_sign_in_4000_in&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rvbncu&#x2F;account_hacked_...</a><p><a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;qx8i02&#x2F;got_hacked_and_found_a_30k_bill_please_turn_on&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;qx8i02&#x2F;got_hacked_and_...</a><p><a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rv4mnq&#x2F;my_account_was_hacked_and_now_my_bill_is_over&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;aws&#x2F;comments&#x2F;rv4mnq&#x2F;my_account_was_...</a>
Upvote: