Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hackers Find Home In Amazon EC2 Cloud

Posted by CmdrTaco on from the don't-mind-us dept.

snydeq writes "Security researchers have spotted the Zeus botnet running an unauthorized command and control center on Amazon's EC2 cloud computing infrastructure. This marks the first time Amazon Web Services' cloud infrastructure has been used for this type of illegal activity, according to threat researcher Don DeBolt. The hackers got onto Amazon's infrastructure by hacking into a Web site hosted on Amazon's servers and then secretly installing their command and control infrastructure."

6 of 89 comments (clear)

  1. And? by Kenja · · Score: 4, Insightful

    There is nothing intrinsic to a cloud of computers that makes them any different then the internet in general. Anything that makes use of unprotected computers on the internet will make use of a cloud as well. In fact, from a logical perspective, the internet is a cloud. Its just that access is generally curtailed in some way.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:And? by Monkeedude1212 · · Score: 2, Insightful

      In fact the internet has been represented as a cloud long before cloud became a buzzword.

  2. Nothing really special by Yetihehe · · Score: 5, Insightful

    Hackers break into website, but it happens to be hosted on EC2. Hosting in cloud doesn't automagically make your sites more secure.

    --
    Extreme Programming - Redundant Array of Inexpensive Developers
  3. This type of illegal activity? by quangdog · · Score: 4, Insightful

    "This marks the first time Amazon Web Services' cloud infrastructure has been used for this type of illegal activity"

    So, has it been used for other illegal things that have been reported on? Is it even possible for anyone to find out all the possible illegal uses of technolgies like cloud computing?

  4. The "Deniable" Already Happens! by StCredZero · · Score: 2, Insightful

    "This marks the first time Amazon Web Services' cloud infrastructure has been used for this type of illegal activity"

    So, has it been used for other illegal things that have been reported on? Is it even possible for anyone to find out all the possible illegal uses of technolgies like cloud computing?

    I'm willing to bet that folks like Apple, Google, Amazon, and Microsoft are already hiring "security consultants" to act as deniable intermediaries to other consultants using semi-legal (or flat-out illegal) means to gather information. Not only are arrangements like this being used for industrial espionage, but to gather intelligence on illegal operators who might hack into or otherwise subvert corporate resources like AWS or Google's cloud. This would just be an extension of what companies already do with "private detectives."

    Someone needs to start writing novels about this!

  5. WHAT???? by Colin+Smith · · Score: 2, Insightful

    Hosting in cloud doesn't automagically make your sites more secure.

    You mean... I still have to have people who can "manage" my systems?

    NOOOO!!!!
     

    --
    Deleted