Cybercriminals conducted a sophisticated five-month espionage operation targeting a senior executive at a major global stock exchange, exfiltrating email data through legitimate cloud services like Dropbox and OneDrive to evade detection. The attackers used small, repeated data transfers that mimicked normal cloud traffic patterns, demonstrating advanced tradecraft focused on intelligence gatherin
Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black's Threat Hunter Team reported the campaign this week. This points to espionage, not a money grab:
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
