Sign in / up

back to article Dropbox used as command and control for Taiwan time bomb

A remote access trojan (RAT) is using Dropbox for command and control in a targeted attack against the Taiwanese Government, malware analyst Maersk Menrige says. The upgraded PlugX RAT is the first targeted attack to use Dropbox to update command and control settings, Menrige said, as distinct from other malware and ransomware …

COMMENTS

House rules Send corrections
This topic is closed for new posts.
  1. Arachnoid

    A similar exploit.........

    Could be used with any of the on-line storage providers say Microsoft Cloud which provides it with Office 2013

    4 0
    1. Robert Helpmann??
      Reply Icon
      Childcatcher

      Re: A similar exploit.........

      Past exploits used FTP for similar purposes. Everything old is new again.

      2 0
  2. sisk

    Seems risky for the perpetrators to me. Wouldn't any legitimate company just shut down the account as soon as a security researcher informed them they were being used as a C&C server?

    1 0
    1. Tom Samplonius
      Reply Icon

      "Seems risky for the perpetrators to me. Wouldn't any legitimate company just shut down the account as soon as a security researcher informed them they were being used as a C&C server?"

      That goes for any C&C protocol. But the solution is already known: use lots of C&C servers, located via a hash function. Or lots of Dropbox accounts via a hash account. Dropbox needs just needs to stop xyzlkajsdfklzvc, xyxkawerup, and xyzupweas from signing up free Dropbox accounts.

      0 0
  3. Anonymous Coward
    Big Brother

    When RAT trojans attack your computer.....

    On a clean computer is it possible to get infected by visiting the dropbox website? If not then how can this be misdiagnosed as some kind of Dropbox malware

    "DropSmack: How cloud synchronization services render your corporate firewall worthless"

    It's been patently obvious for years that firewalls are next to useless, corporate or otherwise ..

    https://media.blackhat.com/eu-13/briefings/Williams/bh-eu-13-dropsmack-jwilliams-wp.pdf

    0 0
This topic is closed for new posts.

Other stories you might like