Hackers Weaponize AWS Encryption to Hold S3 Buckets for Ransom

A newly discovered ransomware campaign targets Amazon S3 buckets by exploiting AWS's Server-Side Encryption feature. Attackers use compromised credentials to encrypt data with custom AES-256 keys, making recovery impossible without ransom payment. The operation, attributed to "Codefinger,"...