DigitalOcean: Cloud Storage Used in BdThemes Attack
DigitalOcean Spaces bucket was used by BdThemes to host JSON files that were poisoned by threat actors in the supply chain attack,…
Tag: cloud storage
iCloud+ Subscription Required for Hide My Email Feature
iCloud+ is Apple's paid cloud storage service that includes the Hide My Email feature. The privacy flaw affected iCloud+ subscribers.
MEGA Cloud Service
MEGA is a cloud storage and file hosting service. Qilin ransomware affiliates exfiltrated data to MEGA before deploying ransomware in attacks exploiting…
s5cmd: Bulk File Operations Tool
s5cmd is a legitimate command-line tool used for bulk file operations, often with cloud storage. In the attack, it was deployed to…
OneDrive: Synced Files Stolen by ACR Stealer
ACR Stealer steals files from synced OneDrive folders as part of its data exfiltration.
Proton Drive
Proton Drive is an encrypted cloud storage service. Qilin ransomware affiliates used Proton Drive for data exfiltration before ransomware deployment in attacks…
Wasabi: Cloud Storage Service
Wasabi is a cloud storage service abused by Gamaredon as a dead drop resolver.
Tebi: Cloud Storage Service
Tebi is a cloud storage service abused by Gamaredon as a dead drop resolver.
Intercolo: Cloud Storage Service
Intercolo is a cloud storage service abused by Gamaredon as a dead drop resolver.
PteroEffigy: Gamaredon C2 Tool Using GoFile
PteroEffigy is a tool used by Gamaredon to fetch the command-and-control server using the GoFile cloud storage service.