The Growing Threat of Malware Concealed Behind Cloud Services

Cybersecurity threats are evolving as malware operators increasingly use cloud services to store and distribute malicious payloads. FortiGuard Labs has observed botnets like UNSTABLE and Condi leveraging cloud storage for their operations, making it challenging to disrupt attacks. These botnets exploit vulnerabilities in various devices to enhance their capabilities. The UNSTABLE botnet, for example, targets JAWS webservers and uses XOR encoding for its configuration. On the other hand, the Condi DDoS botnet exploits CVE-2023-1389 to control devices and establish connections with a central Command and Control server. These attacks highlight the growing trend of cybercriminals leveraging cloud platforms for malicious activities. Organizations are urged to strengthen their cloud security defenses by implementing multi-layered security measures, regular updates, and network segmentation to mitigate potential breaches. Fortinet provides protections against these malware variants and supports various security services to help organizations combat sophisticated cyber threats effectively.