Dropbox's new terms bring inactive account deletion to 6 months from January 2027, plus same-email suspension linkage and a looser refund policy.
dropbox
A Dropbox Lenovo ID SSO flaw let attackers take over accounts with just an email address, no password needed. Dropbox has revoked sessions and hardened login.
OpenAI’s new App Directory lets ChatGPT summarize Dropbox files, order DoorDash, and manage Music directly, turning the AI into a true digital gateway.
Evolved ClayRat spyware uses Accessibility Services to install a keylogger and lockscreen bypass. It leverages self-defense (blocking uninstallation) and screen recording for comprehensive surveillance.
Google Workspace now supports direct, server-to-server data migration from Dropbox via APIs. Enterprise customers can transfer up to 100 accounts per session.
Dropbox Passwords will be fully discontinued on October 28, 2025. Users must export all saved data before then, as all information will be permanently deleted.
North Korean APT Kimsuky is using GitHub private repos, Dropbox, and XenoRAT malware via spearphishing to compromise victims and conduct cyber-espionage.
Kimsuky APT is using HWP documents and stealthy AnyDesk backdoors in a new phishing campaign to infiltrate systems under the guise of academic collaboration.
ChatGPT's Deep Research now connects to Box and Dropbox, allowing AI to access your cloud files for more personalized and in-depth reports.
New report details APT37's "ToyBox Story" campaign, using spear phishing and cloud services to deploy RoKRAT malware. Fileless attacks and stealthy tactics revealed.
New email campaign uses tricky tactics and legitimate services to deliver the RATty Trojan in Spain, Italy, and Portugal. Stay alert for invoice scams!
Explore the Triton RAT, a Python-based remote access tool with powerful malicious capabilities and control via Telegram.
Explore how the Blind Eagle group has evolved since 2018, employing advanced tactics like Remote Access Trojans to conduct cyber espionage.
Learn how a massive malvertising campaign exploited illegal streaming websites to deliver information-stealing malware.
Explore the Lotus Blossom group's persistent cyber attacks and learn how they utilize the Sagerunex backdoor for espionage.
Uncover the dangers of DriverEasy, a malware targeting macOS users through deceptive job applications and phishing tactics.
Beware of SVG phishing attacks. Learn how attackers are using SVG files to bypass anti-spam protections and distribute malicious links.
Discover the latest campaign spreading the AsyncRAT malware. Learn how cybercriminals are utilizing trusted infrastructure to evade detection.
Uncover the operations of the prolific cybercriminal group Crazy Evil. Dive into their sophisticated social engineering tactics and cross-platform malware toolkit.
Learn about the advanced persistence and stealth techniques used by APT31 and APT27 in the EastWind cyberattacks targeting Russian organizations
One of the most notable aspects of CLOUD#REVERSER is its use of Google Drive and Dropbox for C2 communication and data exfiltration