CloudScout, a toolset leveraging stolen cookies from MgBot plugins, was used in Taiwan between 2022 and 2023 to access and exfiltrate data from Google Drive, Gmail, Outlook, and potentially seven other cloud services, targeting both religious institutions and government entities.  Its modules written in C# are deployed by MgBot plugins written in C++, which are … Continue reading Evasive Panda’s New Toolkit Targets Cloud Services for Data Theft