Hackers have created a tunnel using Gmail that can be used to steal data. Here's what you need to know when trust + trust=danger.
Love it or loathe it, you can’t ignore Google’s highly popular free email platform, Gmail. With reports of, some are a little more, shall we say, complex in terms of the threat they pose. Such is the case with the latest report from security research ers who have uncovered Coffin-Code attackers using malicious Python packages designed to create a data-exfiltrating tunnel by way of Gmail. Here’s what you need to know.
Let’s start at the beginning and make it clear that the Simple Mail Transfer Protocol at the heart of this attack mechanism is not used by Gmail alone. SMTP is the de facto communication protocol used to send and receive email across the internet. It is, however, a highly trusted protocol just as Gmail is a highly trusted email provider. Trust plus trust, in this case, equals danger.
Although all seven malicious packages have now been removed from the Python Package Index, the attack methodology is worth taking note of. “Watch for unusual outbound connections, especially SMTP traffic, since attackers can use legitimate services like Gmail to steal sensitive data,” Brown warned.You Have Until June 1 To Save Your Passwords, Microsoft Warns App Users
Gmail Hack Gmail Security Gmail Exploit Python Socket Security Security Research Pypi Python Exploit Email
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Hackers using malware to steal data from USB flash drivesInfected USB flash drives can spread malware among multiple organizations in ways that can easily bypass traditional security systems.
Read more »
Hertz says hackers stole customer credit card and driver’s license dataHertz is alerting customers that personal information may have been stolen in a data breach that impacted one of the firm’s vendors
Read more »
Hertz Hackers Stole Customers’ Personal Data And License RecordsDrivers’ names, dates of birth, contact and credit card information were revealed in the cyberattack, Hertz says
Read more »
Whistleblower Says He Received Threats After Investigating Whether Elon Musk's Minions Were Stealing Government DataScience and Technology News and Videos
Read more »
Anonymous Hackers Expose Putin’s Secret Data—Publish Trump FileAnonymous strikes again—what to know.
Read more »
Oregon agency won't say if hackers stole data in cyberattackOregon's environmental agency won't say if a group of hackers stole data in a cyberattack that was first announced earlier this month
Read more »