Why Online Storage Services Are Enticing to Hacker Groups Cloaked Ursa is attributed to the Russian intelligence service SVR and attracted attention in the past - for example, with the SolarWinds hack. Moreover, the criminals used the online storage to store the stolen information there. However, clicking on the link triggered a series of malicious actions, such as grabbing user information and downloading malware from Google Drive or Dropbox. The attackers used a specially prepared PDF that was supposed to lead to proposed dates with the embassies.

Related: How To Tell If a Ransomware Message Is Real or Fake They report that members of the hacker group Cloaked Ursa (APT29) used such links to attack the embassies in Portugal and Brazil in May and June 2022. Usually, the users then download ZIP files or ISOs that contain malware.Ī recent report by Unit42 security researchers shows how dangerous such links can be. The attackers use phishing techniques to trick victims into downloading malicious files. Related: Threat Hunting Basics: What You Need To Know However, not every link to online storage is a good one, as more and more criminals are abusing popular cloud file sharing services to spread links to malware. The cloud-based online storage services are also suitable for sharing files with friends. Dropbox and Google Drive are extremely handy when you want to store files that need to be available across multiple devices.

Is dropbox secure from ransomware