Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography

To secure an OSS bucket, a user has to set up a proper access policy. If this is done incorrectly, a malicious user can upload or download a user’s files to or from the bucket itself.