Ransomware Running Wild in the Cloud

Threat actors evolved their methods conducting ransomware attacks in the cloud and on-premise during 2023 and show no signs of stopping. This discussion addresses initial access factors and threat actor trends associated with cloud ransomware attacks, including a shift to server-side exploits and prioritization of data exfiltration over data encryption. Content also includes notable incidents, attack models, and examples of how threat actors are adapting their methods to conduct ransomware attacks in the cloud. This presentation is based on technical research and analysis derived from multiple sources, including Google Cloud teams and the cybersecurity industry. Attendees will gain increased awareness of threat actor activity used to conduct ransomware attacks in the cloud along with multiple approaches to help prevent ransomware in cloud environments, including actionable cloud-specific security risk mitigations, resources, and industry best practices for preventing ransomware in the cloud.

View upcoming Summits: http://www.sans.org/u/DuS

SANS Ransomware Summit 2024
Ransomware Running Wild in the Cloud
Crystal Lister, Cloud Security Technical Program Manager, Google

Видео Ransomware Running Wild in the Cloud канала SANS Digital Forensics and Incident Response