I want to share a recent attack on my personal AWS account - what happened, how the attacker operated, what I learned, and what could’ve been done better.

I’m sharing this not-so-funny experience because it shows how real and targeted these attacks can be. We always say "it won't happen to me", well, it happened ...

This incident really made me think - and only grew my appetite to tackle the hard problems the security industry (still) faces.

Let me take you through my humbling experience, the fight to regain ownership, and my breakdown of the attacker’s flow and intent.