New Amazon Ransomware Attack—‘Recovery Impossible’ Without Payment

Halcyon reports a confirmed ransomware campaign, “Codefinger,” that targets AWS S3 by exploiting SSE-C (server-side encryption with customer-provided keys) to encrypt data and demand payment for the AES-256 keys needed to decrypt it, making recovery otherwise impossible; the report underscores continued ransomware activity alongside groups like Play and LockBit.