It's Getting Real & Hitting the Fan! Real World Cloud Attacks
summary
Concrete case studies of recent cloud-native incursions investigated by Mitiga, showing successful attacks, defensive failures, and incident response actions. Examples focus on real-world cloud environments and forensic findings to highlight how cloud attacks unfold and how responders remediated them.
AI-written summary · about
chapters (24)
- 0:00Intro
- 0:16Speaker
- 0:58About Mitiga
- 1:25Introduction
- 3:18From Saas Marketplace to Major Breach
- 4:47Is it Too Long? Yes, it is!
- 6:37The Response Can Be Long...
- 8:23Substantial Impact
- 10:31Suspicious Files on EC2 Instance
- 11:32Crypto Mining through Cloud Tech
- 11:55The Redis AMI
- 13:36AWS Community AMI with Cryptominer
- 14:13When You Need Windows 2008 Server AM...
- 14:36Can You Spot the Malicious One?
- 15:12And When You Can't....
- 16:41Background
- 18:05Attack Flow
- 21:43Over 150 Organizations impacted!
- 23:17Interactive TTPs - Registration Pattern
- 25:28Good Morning - Your Data is Gone!
- 27:00Investigation Trail
- 30:20Lucky Break!
- 32:38Root Cause Analysis
- 34:56Containment & Recovery
related talks
43mClouds in the forecast: CrowdStrike cloud risk report
18mSecuring cloud innovation: Lessons learned
53mPractical Threat Modeling for real-world and Cloud Situations in our hybrid and W...
31mCloud Threat Landscape - 2021
50mThe Anatomy of Cloud Attacks
32mThreat-Driven Development
41mIdentifying and Mitigating Cloud and Container Threats
32mHow to Train your Red Team (for Cloud Native)