Cloud Usage Up, Even for Attackers

Monday, August 1, 2011 @ 12:08 PM gHale

Cloud computing continues to grow in its usage, even with cyber criminals as they turn to cloud storage services to distribute their malware, said virus researchers at Kaspersky Lab.

Cyber criminals have been using Amazon’s Simple Storage Service (Amazon S3) as a launching point for their SpyeEye operation for at least a couple of weeks, according to a post on Securelist, Kaspersky’s research blog.

Cloud Daze; Breaches Pile Up
Cloud Computing: Security Top Topic
Security Fears Still Hover in Cloud
Lessons Learned: Tips to Avoid Data Theft

Cyber criminals go to Amazon’s S3 offering for its gigabytes of storage, which they can use to host Web based attacks, said Kaspersky Researcher Jorge Mieres.

Though S3 requires users to register to get access to their accounts, cyber criminals get around that impediment by registering their account using stolen credit cards and personal information.

In early June researchers found domains on Amazon’s cloud platform used for installing malware as part of spam and phishing campaigns designed to steal banking credentials and other sensitive data.

The attacks themselves aren’t new. The difference is instead of hosting the malicious site on a bulletproof hosting service or a compromised domain, they’re using domains hosted by Amazon.

Leave a Reply

You must be logged in to post a comment.