Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Cloud Threats on the Rise: Alert Trends Show Intensified Attacker Focus on IAM, Exfiltration

Summary: Unit 42's analysis of security alert trends found organizations saw nearly five times as many daily cloud-based alerts at the end of 2024 as at the start of the year, with the average organization's total cloud alerts up 388% and high severity alerts up 235%. Remote command-line access events using serverless function IAM tokens tripled, and the average cloud environment went from two such alerts in January 2024 to more than 200 by December.

What you should know: A separate Unit 42 campaign cited here harvested over 90,000 credentials from 110,000 targeted domains, including nearly 1,200 cloud IAM credentials that were then used to extort multiple organizations - the same token abuse now showing up hundreds of times per environment per month.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related