Today's Hard|Forum Post
Today's Hard|Forum Post

Thursday August 06, 2015

Man In The Cloud Attacks Discovered

According to this report, attackers can access files on Dropbox, OneDrive, Google Drive without a user's password and without writing server side code. eek!

In our presentation we will examine how common cloud synchronization services can be used by hackers to steal private and corporate data, remain persistent on infected machines and avoid perimeter detection mechanisms. All of this could be done from the attacker's laptop, without any exploits and without writing server side code.