And they cost less than a box of donuts
Stolen cloud credentials cost about the same as a dozen donuts, according to IBM X-Force, whose threat intel team says logins make up almost 90 percent of goods and services for sale on dark web marketplaces.
The annual report is based on X-Force threat intelligence, penetration tests, incident response engagements, and dark web analysis , all collected and compiled between June 2022 and June 2023. ."Our clients got better at detecting back doors, which are directly related to extortion-based attacks. So what has been interesting to see is the criminal ecosystem move to credentials as an access vector to continue these criminal operations."
Plus, most organizations use more than one cloud."So if I can get the same level of access to the same number of organizations by purchasing credentials for the same cost as some donuts, why wouldn't I take advantage of that?" Dwyer added.X-Force tracked 632 new cloud-related CVEs during the 13-month period – a 194 percent increase from last year.
And once they've gained access to users' cloud infrastructure, they can abuse this to deploy illicit cryptominers, ransomware, and other types of malware.Cryptominers, while not a new cloud threat, are something that organizations should be paying more attention to, according to X-Force.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Cloud infrastructure security is having an identity crisisWho's that poking around in your infrastructure? Roles, permissions, policies, and more
Read more »
Professional services firm to create 1,000 new jobs in Northern IrelandRoles will cover areas such as cybersecurity, data analytics, cloud computing, artificial intelligence
Read more »
The future of cloud looks like it'll be paved in siliconYou're probably using cloud providers bespoke chips already and not even know it
Read more »
Generative AI is not a significant chunk of cloud spendingNot to be a buzzkill, but let's take a deep dive into the disparity
Read more »
D2iQ attempts to ease cloud pain with generative AIKubernetes configuration laid bare by chatbot, customer context next on roadmap
Read more »