LA0jD

TREND MICRO | TrendLabs 2014 Targeted Attack Campaign Report
Data-Exfiltration Techniques
• Threat actors abused legitimate cloud storage services such as OneDrive, Google Drive, Dropbox,
Baidu Cloud Network Drive, Gmail, Plurk, Facebook, Twitter, Evernote, and Pastebin for data
exfiltration. In such cases, stolen data was temporarily “parked” on legitimate platforms to evade
detection and for easy transfer.
• Use of the victims’ Web and File Transfer Protocol (FTP) servers and portals was also seen, along with the
continued employment of traditional C&C servers for data exfiltration.
16 | Targeted Attack Trends