← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CloudScout: Evasive Panda scouting cloud services
WHITE CyberHunter_NL 2024-10-29 Modified: 2024-11-28
11
IOCs
MEDIUM VOLUME
A new toolset used by China-aligned cyber-espionage group Evasive Panda is able to access data stored in public cloud services, according to ESET Research, a security consultancy based in Taiwan.
strongcloudscoutmgbotpandafiguregmckgoogle driveeset researchtaiwannightdoorcodeexecutionrocktipsandroidfebruarytwitterfacebookservicefirstpersistenceweb accesscloudscout gmail
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Web Access CloudScout Gmail Google Drive
Indicators of Compromise (2 / 11 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 be17d056039267973e36043c678a5d56 MD5 of 84f6b9f13cdcd8d9d15d5820536bc878cd89b3c8 2024-10-29
FileHash-MD5 c02b6a7cc4f4da2d6956049b90ff53ba MD5 of b3556d1052bf5432d39a6068ccf00d8c318af146 2024-10-29
References (1)
↗ https://www.welivesecurity.com/en/eset-research/cloudscout-evasive-panda-scouting-cloud-services/