I had a pleasure (or not) of working on another incident where, among other things, attackers were using a pretty novel way of exfiltrating data and using that channel for C&C communication. Some of the methods observed in analyzed code were pretty scary – from a defender’s point of view, as you will see further below in this diary.
Print
Share
Comment
Cite
Upload
Translate
APA
() » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th). Retrieved from https://www.truth.cx/2021/02/04/x26xaabusing-google-chrome-extension-syncing-for-data-exfiltration-and-cx26c-thu-feb-4th/.
MLA" » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th)." - , https://www.truth.cx/2021/02/04/x26xaabusing-google-chrome-extension-syncing-for-data-exfiltration-and-cx26c-thu-feb-4th/
HARVARD » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th)., viewed ,
VANCOUVER - » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th). [Internet]. [Accessed ]. Available from: https://www.truth.cx/2021/02/04/x26xaabusing-google-chrome-extension-syncing-for-data-exfiltration-and-cx26c-thu-feb-4th/
CHICAGO" » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th)." - Accessed . https://www.truth.cx/2021/02/04/x26xaabusing-google-chrome-extension-syncing-for-data-exfiltration-and-cx26c-thu-feb-4th/
IEEE" » 
Abusing Google Chrome extension syncing for data exfiltration and C&C, (Thu, Feb 4th)." [Online]. Available: https://www.truth.cx/2021/02/04/x26xaabusing-google-chrome-extension-syncing-for-data-exfiltration-and-cx26c-thu-feb-4th/. [Accessed: ]