T1567.002Exfiltration
Exfiltration to Cloud Storage
Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel. Cloud storage services allow for the storage, edit, and retrieval of data from a remote cloud storage server over the Internet. Examples of cloud storage services include Dropbox and Google Docs. Exfiltration to these cloud storage services can provide a significant amount of…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
14 Sigma rules tagged T1567.002Exfiltration to Cloud StorageT1567.00214 general rules
- APT40 Dropbox Tool User Agenthightest
- DNS Query for Anonfiles.com Domain - DNS Clienthightest
- DNS Query for Anonfiles.com Domain - Sysmonhightest
- PUA - Rclone Executionhightest
- Suspicious Dropbox API Usagehightest
- Curl File Upload To File Sharing Websiteshighexperimental
- PUA - Restic Backup Tool Executionhighexperimental
- DNS Query To MEGA Hosting Websitemediumtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Exfiltration to Cloud Storage
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.