Hackers are turning Amazon S3 bucket encryption against customers in new ransomware campaign - and they've already claimed two victims

The rise of ransomware attacks exploiting AWS encryption capabilities poses a serious security threat, enabling hackers to lock down victim data with no recovery option.

The attackers have cleverly utilized AWS server-side encryption to gain control over victims' data. This method necessitates no vulnerabilities in AWS, just stolen credentials.

AWS's lack of ability to retrieve encrypted data in these cases is alarming, as the encryption keys are stored only by the attackers, leaving victims at their mercy.

Halcyon's report emphasizes that this is a disturbing evolution in ransomware tactics, marking the first recorded incident of such malicious use of AWS encryption.

Read at ITPro