How to Defend Amazon S3 Buckets From Ransomware Exploiting SSE-C Encryption

A new ransomware campaign, dubbed Codefinger, has been targeting Amazon S3 users by exploiting compromised AWS credentials to encrypt data using Server-Side Encryption with Customer-Provided Keys (SSE-C). Attackers then demand ransom…