Leaked AWS access-key — billing, S3, and lateral movement

AWS access keys are scraped and validated in under 60 seconds. Spinning up GPU instances for mining, exfiltrating S3 buckets, and escalating through misconfigured IAM are the top-three attacker workflows.