Cyberattackers Bait Financial Firms with Google Cloud Platform

guest · Jan 24, 2019

Cyberattackers Bait Financial Firms with Google Cloud Platform
January 24, 2019
https://www.darkreading.com/attacks...rms-with-google-cloud-platform/d/d-id/1333729

Researchers have spotted a trend in targeted themed attacks using the App Engine Google Cloud Platform (GCP) to deliver malware via PDF decoys. The threat has so far been detected across 42 organizations, mostly in the financial sector but also within governments worldwide.

This attack is more convincing than traditional attacks because the URL hosting the malware redirects the host URL to Google App Engine, explain Netskope analysts in findings published today. Many decoys used were likely linked to threat actor group Cobalt Strike, they report.

"URL redirection mechanisms/features are widely used and abused by threat actors to deceive victims into believing the malicious files are being delivered from a trusted source," [...]
Click to expand...

Netskope Blog: Targeted Attacks Abusing Google Cloud Platform Open Redirection

Log in or Sign up

Cyberattackers Bait Financial Firms with Google Cloud Platform

guest Guest

Log in or Sign up

Cyberattackers Bait Financial Firms with Google Cloud Platform

guest Guest

Useful Searches