COPYOBJECTION: FENDING OFF RANSOMWARE IN AWS

Summary from the TLDR InfoSec newsletter

Attackers are using SSE-C to encrypt objects in ransomware attacks on AWS accounts. Jesse Griggs established a test environment to measure the alert response time through CloudWatch and how quickly Lambda could block the attacker or disable SSE-C. He noted alerts took about 6 minutes to arrive, while automated responses occurred immediately.