ToddyCat APT Deploys Umbrij Malware to Hijack Gmail via OAuth Token Theft
A new malware strain named Umbrij, attributed to the advanced persistent threat (APT) group ToddyCat, is abusing OAuth 2.0 tokens to gain…
Tag: Google Workspace
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group tracked as UNC6508 compromised REDCap research servers across North American medical, academic, and military institutions, stealing sensitive research…
UNC6508: China-Linked Espionage Group Abusing Google Workspace
UNC6508 is a China-linked cyber espionage group that compromised REDCap research servers and abused Google Workspace content compliance rules to exfiltrate sensitive…
Google Workspace: Cloud Productivity Suite Targeted by OAuth Abuse
Google Workspace, including Gmail, Drive, Contacts, Calendar, and Tasks, was targeted by Umbrij malware. The malware requested full API access via OAuth…