A technique dubbed "ECScape" that allows malicious containers running on Amazon Elastic Container Service (ECS) to steal AWS credentials from other tasks sharing the same EC2 instance.
The attack exploits an undocumented internal protocol between the ECS agent and AWS control plane, enabling privilege...