Get the latest tech news
New Amazon Ransomware Attack—‘Recovery Impossible’ Without Payment
Threat researchers have identified a new “recovery impossible” ransomware campaign targeting Amazon Web Services. Here’s what you need to know.
Halcyon has gone as far as suggesting that Codefinger represents a significant evolution in ransomware capabilities, adding that: “If this spreads quickly, it could pose a systemic threat to organizations using AWS S3 for critical data storage.” I’m not sure I can quite agree that not being able to decrypt data without paying for a key is evolutionary, it’s the basis upon which all ransomware operates, after all, but the use of SSE-C is certainly a novel approach. An Amazon Web Services spokesperson provided the following statement: “AWS helps customers secure their cloud resources through a shared responsibility model. We also thoroughly investigate all reports of exposed keys and quickly take any necessary actions, such as applying quarantine policies to minimize risks for customers without disrupting their IT environment.
Or read this on r/technology
