According to our latest Threat Labs statistics for February 2024, the number of cloud apps abused for malicious purposes continued to grow, reaching a new high of 215 in February 2024. And despite this, OneDrive is still the usual suspect, continuing to be the top cloud app exploited to deliver malware. Opportunistic and targeted threat actors are constantly looking for new legitimate services to deliver their payloads, hiding the attack vector inside legitimate traffic and hence evading security controls.
The latest example of this trend is a recent campaign, unearthed by researchers at Proofpoint, and carri