NATS-as-C2: Inside a new technique attackers are using to harvest cloud credentials and AI API keys

A threat actor has pioneered a sophisticated attack technique using a NATS server as covert command-and-control infrastructure to automate large-scale harvesting and real-time validation of cloud credentials and AI API keys, signaling a new, more resilient evolution in credential theft operations.