topic Huge ransomware campaign targets AWS S3 storage: attackers have thousands of keys in Threats

Huge ransomware campaign targets AWS S3 storage: attackers have thousands of keys

Kyaw_Myo_Oo — Thu, 17 Apr 2025 12:00:54 GMT

Dear All,

A massive database of over 1,200 unique Amazon Web Services (AWS) access keys has been amassed and exploited in a ransomware campaign. Administrators of exposed AWS S3 buckets are finding their files encrypted except for a ransom note demanding payment in bitcoin.

Security researchers discovered a publicly accessible server containing over 158 million AWS secret key records. Most of the keys were duplicate entries replicated across different regional endpoints and configurations.

Huge ransomware campaign targets AWS S3 storage: attackers have thousands of keys

Re: Huge ransomware campaign targets AWS S3 storage: attackers have thousands of keys

stvspaz — Fri, 18 Apr 2025 12:46:55 GMT

Thanks for sharing this ... appreciate the warning

Re: Huge ransomware campaign targets AWS S3 storage: attackers have thousands of keys

Kyaw_Myo_Oo — Fri, 18 Apr 2025 14:01:23 GMT

I truly appreciate your kind words and insights @stvspaz.