AWS server-side encryption is being abused in the next evolution of ransomware. ... Instead, it marks all the encrypted files for deletion within a week, also using AWS S3 native features.

The group does not threaten to release the files to the public, or delete it. Instead, it marks all the encrypted files for deletion within a week, also using AWS S3 native features.

AWS server-side encryption (Amazon) Administrators may leave the system to encrypt at the default 256-bit AES or choose one of the alternative methods, namely SSE-C or SSE-KMS.