Collected research

8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur

Benjamin Harris, Aliz Hammond and Pinaki Mondal · watchTowr · 4 February 2025

About 150 abandoned Amazon S3 buckets, still referenced by software, documentation and deployment pipelines, were re-registered and logged over 8 million requests in two months from government, military and Fortune 500 networks. Whoever holds such a bucket can answer with malicious updates, deployment templates, VM images or unsigned binaries.

Record

Researcher

Benjamin Harris, Aliz Hammond and Pinaki Mondal

Published by

watchTowr

Date

4 February 2025

Topic

Supply

In the archive

• Collected in the 2025 research round

Tags

• supply-chain
• aws
• ci-cd
• rce
• large-scale-scan
• measurement-study
• tooling
• owasp-a06-2021
• owasp-a08-2021

This page is the archive's own catalogue record. The research is the work of Benjamin Harris, Aliz Hammond and Pinaki Mondal, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 12 August 2026.