An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday]
CyberWire Daily
00:00
Dos Drop Box Management
The most unique aspect here is the drocp box management, the command and control infer structure. The actors were eventually uploading the data t a they were collecting to dos drop box accounts. So from the attacker's perspective, it's hiding in plain sight. While leveragin the favorite in cloud rity storage tool everyone can use,. It's very difficult to identify any malicious activity done.
Play episode from 07:26
Transcript
