Google Docs becomes Google SOCKS: C2 Over Google Drive
ID: b3055f07-cb02-5bff-82f9-fcd49454d037
STIX ID: report--b3055f07-cb02-5bff-82f9-fcd49454d037
Feed Name: Black Hills Infosec Blog
Threat Score
This blog post describes a proof-of-concept Python script (google_socks.py) that uses the Google Drive API to relay socket traffic between hosts, demonstrating Netcat, SSH, and Meterpreter sessions tunneled via Google Drive; the author provides demos, implementation notes, and a GitHub link to the PoC.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.