Dropbox, WordPress used as cloud cover in new APT attacks

The cyberespionage gang out of China who recently hacked into media outlet networks is now using Dropbox and WordPress in its attacks rather than via traditional email phishing attacks and server compromise, new research has found.

WordPress used as cloud cover in new APT attacks

Dropbox used as cloud cover in new APT attacks

The so-called DNSCalc gang, which breached The New York Times during the fall of 2012 and again in early 2013, appears to be the culprit behind a new wave of attacks targeting individuals and groups associated with the Association of Southeast Asian Nations (ASEAN) Member Nations. The group's new M.O.: using Dropbox to distribute its malware and WordPress for the initial stage of the command-and-control (C&C).

Dropbox, WordPress used as cloud cover in new APT attacks | Dark Reading