How recruitment fraud turned cloud IAM into a $2 billion attack surface

Recruitment fraud is being used to deliver trojanized packages, compromising cloud IAM configurations. Adversaries are pivoting from stolen developer credentials to full cloud IAM compromise, with over $2 billion associated with cryptocurrency operations. This attack chain is known as the IAM pivot.