Security News > 2025 > January > Ransomware abuses Amazon AWS feature to encrypt S3 buckets
2025-01-13 15:27
A new ransomware campaign encrypts Amazon S3 buckets using AWS's Server-Side Encryption with Customer Provided Keys (SSE-C) known only to the threat actor, demanding ransoms to receive the decryption key. [...]
News URL
Related news
- Attackers are encrypting AWS S3 data without using ransomware (source)
- Week in review: AWS S3 data encrypted without ransomware, data of 15k Fortinet firewalls leaked (source)
- Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant' (source)
- Delivering Malware Through Abandoned Amazon S3 Buckets (source)
- Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days (source)