Raymond Cazanese - The Cloud is for Launching Cyber Attacks
Title: The Cloud is for Launching Cyberattacks
The scale and ease-of-use of the cloud make it the ideal environment for launching cyberattacks. In the past year, we have uncovered phishing campaigns, scams, Trojans, malware payloads, command and control servers, data exfiltration channels, and more, all hosted on popular cloud services. Cloud services provide excellent cover, especially when the attack uses the same cloud services as the victim.
By far the most popular ways cloud services are used in cyberattacks are for phishing and malware delivery. Once inside an organization, traditional methods still dominate, but cloud services are becoming more popular. Cloud services are even gaining popularity among insider threats -- 7% of all users copy sensitive data from their employers to their personal accounts. In this presentation, we provide statistics collected from millions of users from hundreds of organizations, specific examples of threats, and recommendations to prevent organizations from falling victim to the next cloud-based cyberattack.