Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

F5 Labs disclosed a mass-scanning campaign targeting Vite development servers exposed to the internet. Attackers steal AWS and Azure cloud credentials, configurations, and infrastructure state files.

• Attack automatically scans exposed Vite dev servers
• AWS and Microsoft Azure credentials are stolen
• Configurations and infrastructure state files are also taken
• Campaign identified and described by F5 Labs