fermer
fermer
Le réseau de demain
Le réseau de demain
Planifiez votre chemin vers un réseau plus rapide, plus sûr et plus résilient, conçu pour les applications et les utilisateurs que vous prenez en charge.
          Essayez Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Netskope fait ses débuts en tant que leader dans le Magic Quadrant™ de Gartner® pour le SASE à fournisseur unique.
              Sécuriser l’IA générative pour les nuls
              Sécuriser l’IA générative pour les nuls
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                La prévention moderne des pertes de données (DLP) pour les Nuls
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Réseau SD-WAN moderne avec SASE pour les nuls
                  Modern SD-WAN for SASE Dummies
                  Cessez de rattraper votre retard en matière d'architecture de réseau
                    Identification des risques
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                            Netskope GovCloud
                            Netskope obtient l'autorisation FedRAMP High Authorization
                            Choisissez Netskope GovCloud pour accélérer la transformation de votre agence.
                              Let's Do Great Things Together
                              La stratégie de commercialisation de Netskope privilégie ses partenaires, ce qui leur permet de maximiser leur croissance et leur rentabilité, tout en transformant la sécurité des entreprises.
                                Solutions Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Support technique de Netskope
                                  Support technique de Netskope
                                  Nos ingénieurs d'assistance qualifiés sont répartis dans le monde entier et possèdent des expériences diverses dans les domaines de la sécurité du cloud, des réseaux, de la virtualisation, de la diffusion de contenu et du développement de logiciels, afin de garantir une assistance technique rapide et de qualité
                                    Vidéo Netskope
                                    Formation Netskope
                                    Grâce à Netskope, devenez un expert de la sécurité du cloud. Nous sommes là pour vous aider à achever votre transformation digitale en toute sécurité, pour que vous puissiez profiter pleinement de vos applications cloud, Web et privées.

                                      Cloud Threats Memo: Dropbox: Flexible Cloud Storage Increasingly Exploited by Attackers

                                      Jul 26 2022

                                      Researchers from ESET have shed light on a new macOS backdoor, discovered in April 2022, dubbed CloudMensis. At first glance this is just the latest example of spyware targeting the Apple operating system with the intent of exfiltrating documents, keystrokes, and screen captures. However, as the name suggests, one of the interesting features of this malware is a sophisticated two-stage kill chain that exploits legitimate cloud services in different phases of the attack.

                                      Specifically, a cloud storage service, pCloud, is used to store and deliver the second stage payload, and once the second stage payload is installed, CloudMensis leverages more cloud storage services for both receiving commands from its operators and for exfiltrating files, using three different providers: pCloud, Yandex Disk, and Dropbox.

                                      This is further confirmation that, as organizations give their digital trust to reliable online storage services for their daily business, threat actors are constantly looking for new ways to exploit this trust, to launch evasive campaigns that are difficult to detect. Threat actors are drawn to the very same reliability and simplicity to set up their malicious infrastructure that appeals to the organizations they target and so we all find ourselves using the same cloud applications on both sides of the battlefield. 

                                      This campaign proves that new cloud storage services are constantly added to the long list of those exploited for malicious purposes, while apps such as Dropbox are a well established weapon in the hands of threat actors. Dropbox is considered by the attackers to be a reliable and flexible service (for both delivering the payload and hosting the command and control infrastructure), and for this reason it has been successfully deployed for campaigns driven by cyber crime and cyber espionage, also in a recent campaign carried out by the infamous Russian-speaking threat actor APT29.

                                      How Netskope mitigates the risk of legitimate cloud services exploited for malicious purposes

                                      Dropbox is one of thousands of services where the Netskope Next Gen SWG can provide granular access control and one of dozens for which instance detection is also available. In similar cases where Dropbox is exploited to host the command and control, it is possible to configure a policy that prevents potentially dangerous activities (such as upload and download) from non-corporate instances. It is also possible to make the scope of the policy broader, blocking these activities for any unneeded cloud storage service on a category basis (including pCloud and Yandex Cloud) that can potentially be exploited for command and control or malware delivery.

                                      Malware delivery from a cloud storage service can also be prevented through Netskope Threat Protection, part of the NG-SWG, which provides an effective defense against modern evasive threats regardless of the nature of the traffic (web or cloud) with a layered approach that offers multiple engines, ranging from antivirus to cloud sandboxing, plus additional detectors based on machine learning to detect Office documents containing malicious macros and portable executables.

                                      Stay safe!

                                      author image
                                      Paolo Passeri
                                      Paolo supports Netskope’s customers in protecting their journey to the cloud and is a security professional, with 20+ years experience in the infosec industry.
                                      Paolo supports Netskope’s customers in protecting their journey to the cloud and is a security professional, with 20+ years experience in the infosec industry.

                                      Restez informé !

                                      Abonnez-vous pour recevoir les dernières nouvelles du blog de Netskope