As commercial adoption of cloud technologies continues, cloud-focused malware campaigns have increased in sophistication and number. This report provides insights into the second half of 2023, an analysis of real-world techniques employed by attackers and an overview of novel cloud-focused malware campaigns.
Key technical findings covered in detail within the report include:
- Attackers target cloud services that require special technical knowledge to exploit, such as Docker, Redis, Kubernetes, and Jupyter
- Docker remains the most frequently targeted cloud-native service for initial access
- Threat actors leverage hosting companies across the globe for their infrastructure
- Cryptojacking is no longer the sole focus of cloud attackers, recent cloud. malware campaigns have shown a diversification in objectives
