Security News > 2022 > June > Cloud services proving handy for cybercriminals, SANS Institute warns

These days, cybercriminals are living off the cloud, according to Katie Nickels, director of intelligence for Red Canary and a SANS Certified Instructor.

"It's not enough to pay attention to the operating systems, the endpoints, said Nickels, speaking on a SANS Institute panel about the most dangerous new attack techniques at RSA Conference."Adversaries, a lot of their intrusions, are using cloud services of different types.

Yes, living off the land, in which intruders use legitimate software and cloud services to deploy malware or spy on corporations and other nefarious activities, isn't a new type of attack, Nickels admitted.

With living off the cloud attacks, Nickels said these groups are using common SaaS and IaaS, which makes their activity look like trusted cloud traffic.

"This is one of the reasons adversaries are doing this living off the cloud.

"​​And lastly, when you find abuse of these cloud services, it's not the cloud provider's fault.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/06/09/criminals_cloud_sans/