Lately, attackers have gotten more creative and aggressive in trying to find various credential files on exposed web servers. Our “First Seen” page each day shows many new versions of scans for secrets files like “.env”.
This article has been indexed from SANS Internet Storm Center, InfoCON: green