Weaponizing the AWS CLI for Persistence

Researchers pulled off a slick persistence trick using AWS CLI aliases. They chained dynamic alias renaming with command execution to swipe credentials, without breaking expected CLI behavior. No red flags. Perfect fit for automated environments like CI/CD pipelines. Backdoors, no AWS CLI tampering required.