Ransomware a Threat to Cloud Services, Too
Summary: A Children in Film employee opened an email attachment posing as an invoice, and within 30 minutes all 4,000+ company files on a cloud drive had 'vvv' appended to their extensions and 'help.decrypt' notes in every folder. The malware was a TeslaCrypt strain that slipped past antivirus on the hosting firm's server, and restoring from the provider's daily backups took almost a week.
Why it matters: The hosting firm's antivirus saw nothing because the encryption ran on a local machine and the cloud drive simply looked like normal read-write activity - and the same server disruption hit other customers, so your provider's controls are not your controls.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026