Attackers leave 'hello' messages as decoys in new large-scale cloud campaign

Security researchers have uncovered a major cloud attack campaign they've named 'Greeter,' which targets AI infrastructure and cloud instances. The attackers were discovered after deliberately leaving "hello" messages in system logs to cover their tracks and mislead defenders. This campaign appears to be broad-ranging and sophisticated, starting from simple searches for exposed cloud services but evolving into something much more significant.

For cloud engineers and security teams, this represents a new level of attacker sophistication where adversaries intentionally create false indicators to throw off detection systems. The campaign's focus on AI infrastructure suggests attackers are adapting to target modern technology stacks and the valuable data they contain. The takeaway is clear: log manipulation is becoming a standard part of the attacker playbook, requiring defenders to look beyond surface-level indicators.