Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have revealed a mass-scanning campaign targeting Vite deployments to extract sensitive data. The campaign is an automated effort that targets internet-exposed Vite development servers. Its goal is to steal cloud credentials, configurations from Amazon Web Services and Microsoft Azure instances, and infrastructure state files. This campaign is specifically designed to exploit a flaw in Vite. The researchers at F5 Labs have disclosed details of this campaign.