It’s a question raised by Dissent Doe from DataBreaches.net, who involved JayeLTee and a third researcher, who chose to remain anonymous, in this in-depth investigation. The project also benefited from the contributions of two other experts, @Chum1ng0 and @bucketchallenge.
The evidence gathered suggests that some affiliates of cybercriminal groups exploit exposed buckets to simulate cyberattacks with the aim of extorting money. Victims are led to believe they have been targeted by a sophisticated hacking operation.
The published article also highlights the poor practices of certain companies in managing their digital data. This negligence, often unintentional but no less serious, significantly facilitates the activities of cybercriminals. Even individuals with no technical expertise could access these exposed buckets, download sensitive information, and falsely claim to have hacked a victim’s systems.