Understanding Cloud as an Attack Vector

In December, Netskope Threat Labs presented our work, “Cloud as an Attack Vector,” at the 23rd International AVAR Cybersecurity Conference. The Association of Antivirus Asia Researchers (AVAR) is a non-profit organization with members from 17 countries and facilitates knowledge sharing, professional development, networking, and partnering for cybersecurity experts and organizations. Ours was one of 27 presentations from 14 different countries featured at the conference.

“Cloud as an Attack Vector” highlights four key ways in which cybercriminals have been abusing cloud services to launch attacks that stay under the radar, for:

• Malware delivery
• Phishing
• Command and Control
• Malware propagation

The blog serves as a cautionary tale, highlighting why cloud services should be approached with a Zero Trust strategy.

You can find all the details in our AVAR blog post.