Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data

guest · Nov 17, 2020

Hackers are increasingly reaping the benefits of the cloud
Cyber criminals bring the cloud to the dark web, making it easier to move stolen data
November 16, 2020
https://www.itpro.co.uk/security/357781/hackers-increasingly-reaping-the-benefits-of-the-cloud

Security researchers have discovered that hackers are storing terabytes of internal business data and logins for popular providers including Amazon, Google, Twitter, Facebook and PayPal on underground cloud services.

According to a new Trend Micro report, the hackers sell the data on the dark web and deliver the data via access to the cloud logs. Robert McArdle, director of forward-looking threat research for Trend Micro, said in a blog post said this resulted in more stolen accounts being monetized and cut the weeks it usually takes for data to go from stolen to being used against an enterprise to just days or hours.
Click to expand...

Threat actors can purchase access to these so-called “Cloud of Logs,” which can include thousands or millions of emails and passwords, for $350-$1000 per month.
Once a threat actor purchases access to the cloud-based logs of stolen data, they can use the information for secondary infection.

The result is optimized cybercrime by ensuring threat actors who specialize in specific areas - say cryptocurrency theft or e-commerce fraud - can access the data they need quickly, easily and relatively cheaply.
Click to expand...

Trend Micro: Cybercriminal ‘Cloud of Logs’

The Emerging Underground Business of Selling Access to Stolen Data
In this latest report by Trend Micro Research, we take a closer look at an emerging underground market that is driven by malicious actors who sell access to troves of stolen data, frequently advertised in the underground as “clouds of logs.”

This underground market affects not just users whose credentials are stolen and sold to cybercriminal customers, but also the organizations that users are a part of, as these would have less time to detect and respond to attacks enabled by data provided by the clouds of logs.
Click to expand...

The researchers estimate that cloud services decrease the time it takes for cybercriminals to use stolen data against an organization from weeks to days or even hours.

The cybercriminals advertise the cloud-based data on underground marketplaces using the term "clouds of logs."

The attackers offer monthly subscription rates to access their stolen data, which range between $300 and $1,000.

Click to expand...

Log in or Sign up

Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data

guest Guest

Log in or Sign up

Cybercriminal ‘Cloud of Logs’: The Emerging Underground Business of Selling Access to Stolen Data

guest Guest

Useful Searches