Do Son Kaspersky exposed ToddyCat APT's evolution: the group steals M365 OAuth tokens from memory and uses TCSectorCopy to steal locked Outlook OST files, allowing covert access to cloud email outside the perimeter.
ToddyCat
Explore the evolving techniques of the ToddyCat group. Discover how they hide malicious activity in legitimate software.
A new report from Kaspersky Labs reveals a sophisticated toolkit used by the advanced persistent threat (APT) group, "ToddyCat,"
According to experts at Check Point, these attacks, orchestrated by the Chinese hacker collective, ToddyCat, have been ongoing since 2021.