SYMBOLCOMMON_NAMEaka. SYNONYMS
win.driveocean (Back to overview)

DriveOcean

aka: Google Drive RAT

Actor(s): APT28


Communicates via Google Drive.

References
2023-10-26ANSSIANSSI
Attack Campaigns of APT28 since 2021
CredoMap DriveOcean Empire Downloader Graphite MimiKatz Mocky LNK reGeorg
2020-12-17Trend MicroFeike Hacquebord, Lord Alfred Remorin
Pawn Storm’s Lack of Sophistication as a Strategy
DriveOcean

There is no Yara-Signature yet.