Trojan Communicates With Command-and-Control Server Through Google Docs

November 19, 2012
Fuente:SANS NewsBites Vol. 14 Num. 93

Researchers at Symantec have detected a Trojan horse program that uses Google Docs to communicate with its command-and-control infrastructure.

The malware, known as Backdoor.Makadocs, appears to be targeting users in Brazil. It harvests certain data, including infected computers' host names and operating system types. The malware uses Google Drive "Viewer" as a proxy to receive instructions from the command-and-control server.

The trick disguises the communications as encrypted connections within a trusted service. A Google representative said the company is investigating, as "Using any Google product to conduct this kind of activity is a violation of our product policies."

http://www.h-online.com/security/news/item/Trojan-uses-Google-Docs-to-communicate-with-its-control-server-1752343.html
http://www.computerworld.com/s/article/9233831/Malware_uses_Google_Docs_as_proxy_to_command_and_control_server?taxonomyId=17