AWS is most exploited cloud platform, says Atlas VPN

  • June 15, 2022
  • Steve Rogerson
Top exploited services by cloud-native threats, January to April 2022, according to Atlas VPN.

Amazon Web Services (AWS) suffered the most cloud-native exploits among cloud service providers within the first four months of 2022, according to findings by the Atlas VPN team.

The report shows that AWS experienced ten cloud-native exploits accounting for nearly a fifth (18.9%) of all such events in the first four months of this year. Microsoft OneDrive, Discord, Dropbox, Google Drive and GitHub occupy the second place as each endured 9.4% of cloud-native exploits.

AWS leads the cloud service provider market with a share of 33%, followed by Microsoft Azure (21%) and Google Cloud (10%).

As more consumers are shifting to cloud technologies, so are cyber criminals, and their eyes are aimed at the biggest market players.

According to the data presented by the Atlas VPN team, based on information collected by Hackmageddon, AWS suffered the most cloud-native exploits among cloud service providers as of April 2022.

In total, it experienced ten cloud-native exploits accounting for nearly a fifth (18.9%) of all such events in the first four months of this year. Cloud-native threats refer to those cyber events that exploit the cloud in one or more stages of the kill chain.

A total of five services occupies the second place on the list. Microsoft OneDrive, Discord, Dropbox, Google Drive and GitHub each endured five threats accounting for 9.4% of cloud-native exploits in the first four months of 2022.

Next up is Pastebin. Threats aimed at the service comprised 5.7% of cloud-native exploits as of April, followed by Microsoft 365 Suite and Microsoft Azure, each at 3.8%.

While AWS tops the charts as the most exploited cloud service provider, it also leads the cloud market at large. According to the information provided by Finbold and Synergy Research Group, AWS accounts for nearly a third (33%) of cloud infrastructure service providers according to the Q4 2021 statistics, more than any other service.

Another victim of cloud-native exploits this year, Microsoft Azure, ranks second. It has a share of 21%. Meanwhile, Google Cloud rounds out the top three list with a share of 10%.

Cloud services are an attractive target to cyber criminals due to the availability of various tools within the same application to deliver malicious content and the vast amount of sensitive data they hold. It is especially true when it comes to the market leaders as they have the biggest share of users.