Gmail Drafts Used to Exfiltrate Data and Send Malicious Instructions

  • 29 October 2014
  • 0 replies
  • 2 views

Userlevel 7
Badge +54
Malicious communication hides behind legitimate traffic
By Ionut Ilascu on October 29th, 2014 A new variant of IcoScript RAT (remote access Trojan) has been detected to rely on Gmail draft messages to send stolen information to its operator and to receive instructions for further action.
The RAT was discovered in August by security researchers at G Data, who found that it used a hidden Internet Explorer session to access web-based services from Yahoo for communication with the attackers.

At the time, Paul Rascagnares said that changing the email service provider would not be a difficult feat.

 

Data seeping out surreptitiously

 
Shape Security, a company that offers a network hardware solution for protecting websites against cyber-attacks, found a new strain of the malware on the systems of one of its clients, according to WiredFull Article 

0 replies

Be the first to reply!

Reply