San Francisco, June 5
Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.
According to researchers from Mitiga Security, once a malicious user inside has accessed the organisation's Google Drive, they can take action without being recorded at all.
This flaw affects only users who do not have a paid enterprise licence for Google Workspace.
Users who do not have a paid Google Workspace licence have their private drive actions left undocumented.
Hackers can disable logging and recording by cancelling their paid licence and switching to the free "Cloud Identity Free" licence.
This enables threat actors to exfiltrate files without leaving any trace, save for the indication that a paid licence was revoked, which is visible to administrators.
"A threat actor who gains access to an admin user can revoke the user's license, download all their private files, and reassign the license," the researchers said.
The experts also notified Google of its findings, who is yet to respond.
Meanwhile, hackers are targeting iPhones with previously unknown malware, via iMessage to, gain complete control over the iOS device and spy on users.
Cybersecurity company Kaspersky discovered the mobile Advanced Persistent Threat (APT) campaign targeting iOS devices with previously unknown malware.
Dubbed as 'Operation Triangulation', the ongoing campaign distributes zero-click exploits via iMessage to run malware gaining complete control over the device and user data, with the final goal to "hiddenly spy on users".
6 hours agoGadkari urges auto makers to speed up work on scrapping centres
6 hours ago2008 Malegaon blast: Pragya Thakur, other accused appear before special NIA court
6 hours agoGermany sees uptick in far-right extremism, Holocaust memorial sites defaced: Report
7 hours agoAus flight forced to turn around due to passenger's unruly behaviour
7 hours agoBangladesh dengue death toll exceeds 900
7 hours agoNepal and China sign 12 agreements during Prachanda's visit
7 hours ago'Who's Your Gynac?’ is about metamorphosis of a fresher obstetrician-gynaecologist
7 hours agoAkshay Kumar races against time to save miners in 'Mission Raniganj' trailer
7 hours agoAnupriya Goenka: Milan Luthria allowed us to explore character, scene in our own way in 'Sultan of Delhi'
7 hours agoHere is what attracts Tahir Raj Bhasin to a sign project
7 hours agoWhen Sahill Uppal celebrated his b'day 'shirtless' on sets of 'Fuh Se Fantasy'
7 hours agoPlaying Bengali in 'Sultan Of Delhi' was very 'exciting' for Anjumm Shharma
7 hours agoBig unlisted companies may come under tighter regulatory norms