MinIO default minioadmin credential GetObject/ListBuckets targeting terraform-state or credentials.json

Duo Tech@duotech

•updated Jul 8, 2026•1•0•3

Detects unauthorized access attempts to MinIO object storage using the default 'minioadmin' credentials. The rule specifically flags attempts to access sensitive files like 'terraform-state' or 'credentials.json' via HTTP GET requests.