Back to today’s briefing

Story perspectives

Ransomware Targets AWS: 1,200 Keys Stolen, Data Locked

4/17/2025

47 6

Summary

Story summary

A shocking ransomware campaign has emerged, targeting Amazon Web Services (AWS) by exploiting over 1,200 stolen access keys to encrypt S3 buckets. The attackers used Server-Side Encryption with Customer-Provided Keys (SSE-C) to stealthily lock away vital data, demanding a ransom of 0.3 BTC for its release. Experts urge immediate audits of IAM credentials and stronger security protocols to thwart such threats.

1 of 1

Story summary

A shocking ransomware campaign has emerged, targeting Amazon Web Services (AWS) by exploiting over 1,200 stolen access keys to encrypt S3 buckets. The attackers used Server-Side Encryption with Customer-Provided Keys (SSE-C) to stealthily lock away vital data, demanding a ransom of 0.3 BTC for its release. Experts urge immediate audits of IAM credentials and stronger security protocols to thwart such threats.