APT29 utilizes cloud storage service to deliver malicious payloads

Threat Level

Actor Report

For a detailed advisory, download the pdf file here

Summary

APT29, a cyber espionage gang uses cloud storage services such as Google Drive and Dropbox to distribute malware to compromised systems. The gang used a phishing campaign that targeted several Western diplomatic missions and embassies in Portugal and Brazil.