A new ransomware crew dubbed Codefinger targets AWS S3 buckets and uses the cloud giant's own server-side encryption with customer provided keys (SSE-C) to lock up victims' data before demanding a ...

Attackers access storage buckets with exposed AWS keys The files are then encrypted and scheduled for deletion after a week Halycon says it observed at least two victims being attacked this way ...

A threat actor is leveraging AWS’s own encryption against victim firms with no way out except paying for decryption keys, says report. CISOs are being warned to make sure employees take extra steps to ...