DropBook exfiltrates data through Dropbox.
Explicit Confidence 97% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”
Malware
malware:dropbook
Also: DropBook backdoor
Backdoor that uses Dropbox for exfiltration and Facebook fake accounts as a command-and-control channel.
Backdoor that uses Dropbox for exfiltration and Facebook fake accounts as a command-and-control channel.
“and the third one was DropBook”
“they actually implemented a C2 communication channel using Facebook fake accounts”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Dropbox | Explicit | 89 |
| outgoing | USES | Explicit | 89 | |
| outgoing | USES | Command and control | Explicit | 89 |
| outgoing | USES | Data exfiltration | Derived | 89 |
DropBook exfiltrates data through Dropbox.
Explicit Confidence 97% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”
DropBook uses fake Facebook accounts to receive commands through posts.
Explicit Confidence 99% · Assaf Dahan EP 89 Details
“They actually used a Facebook fake account”
“they actually implemented a C2 communication channel using Facebook fake accounts”
DropBook USES Command and control
DropBook implements a command-and-control channel using fake Facebook accounts.
Explicit Confidence 99% · Assaf Dahan EP 89 Details
“they actually implemented a C2 communication channel using Facebook fake accounts”
DropBook USES Data exfiltration
DropBook is described as exfiltrating victim data through Dropbox.
Derived Confidence 95% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”