Ransomware Gangs Target AWS S3 Buckets with Evolving Tactics

Ransomware Gangs Target AWS S3 Buckets with Evolving Tactics

First seen 2 Dec 2025, 18:33 UTC •Feeds.TrendmicroTrendmicroScmagazineCsoonline •90% similarity •22.6

Article Content

Browse articles
ThreatCluster

Ransomware actors are increasingly focusing on cloud-based assets, particularly Amazon Web Services (AWS) S3 buckets. Recent reports indicate that these groups are adapting their tactics to leverage cloud-native features for malicious operations, including data deletion and extraction, as organizations migrate to cloud environments.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Capital One AWS Azure Amazon Aurora Amazon DynamoDB Amazon EBS Amazon EC2 Amazon Glacier Amazon RDS Ransomware AWS SDKs