Where Are My Keys?! Ransomware Group Steals AWS Keys To Advance
Varonis, Thursday, September 25th, 2025
Ransomware groups now target AWS control planes using stolen keys and Pacu. Learn how Varonis detects, investigates, and stops these cloud threats.
Ransomware threat actors have long been known for stealing data, encrypting data, and then demanding ransom payments from unfortunate victims.
Most of these groups previously focused on on-premises infrastructure or virtual servers hosted in the cloud. Targeting the cloud control plane was seen as an attack surface more likely to be targeted by advanced threat groups, such as nation states or groups like Scattered Spider.