Security News > 2021 > August > Cybercriminals buy up admin credentials to sharpen attacks on cloud deployments

Companies should now consider cybercriminals as business competitors, according to Lacework's 2021 Cloud Threat Report Volume 2.
The Lacework Lab analyzed telemetry from its customers and other data to identify rising and increasing security threats to cloud deployments.
One of the most interesting trends over the past few months, according to the report, is rising demand for access to cloud accounts.
This shows up in the sale of admin credentials to cloud accounts from Initial Access Brokers.
The report analyzed traffic from May 1 to July 1, 2021, to identify cloud threats.
The analysis showed that SSH, SQL, Docker and Redis were the cloud applications targeted the most frequently over the last three months.
News URL
Related news
- SANS Institute Warns of Novel Cloud-Native Ransomware Attacks (source)
- Australian pension funds hit by wave of credential stuffing attacks (source)
- CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download (source)
- How cybercriminals exploit psychological triggers in social engineering attacks (source)