Related Threat Clusters

768 Leaked AWS Keys Grant Full Admin Access to Corporate Accounts
A recent investigation by Truffle Security revealed that 768 AWS access keys, including 526 root keys, remain active and grant full administrative privileges to corporate accounts. These keys were publicly exposed…

7 articles · Updated August 21, 2026
Shift in Ransomware Tactics Targeting Cloud Assets
Ransomware actors are increasingly focusing on cloud-based assets, particularly in AWS environments. This shift involves utilizing various tactics to compromise critical business data, moving away from traditional…

56 articles · Updated November 19, 2025
Ransomware Gangs Target AWS S3 Buckets with Evolving Tactics
Ransomware actors are increasingly focusing on cloud-based assets, particularly Amazon Web Services (AWS) S3 buckets. Recent reports indicate that these groups are adapting their tactics to leverage cloud-native…

4 articles · Updated November 21, 2025

Recent Intelligence Reports

AWS Security makes an inscrutable choice — Theregister · August 21, 2026
Ransomware gangs find a new hostage: Your AWS S3 buckets — Csoonline · November 21, 2025