The Anatomy of Cloud Ransomware with Matt Castriotta

This advisory reviews cloud-specific threat mechanisms and high-profile timelines, warning that modern adversaries increasingly use over-privileged non-human identities to perform malwareless, automated mass deletion rather than traditional encryption-based ransomware. It critiques reliance on built-in cloud features (S3 versioning, cross-region replication) as insufficient for cyber attacks and provides an operational roadmap for defining minimum viable business functions, isolated recovery environments, just-in-time domain separation, and strategies to break ransomware reinfection cycles.