Home > List all groups > List all tools > List all groups using tool GoogleDrive RAT

Threat Group Cards: A Threat Actor Encyclopedia

Names	GoogleDrive RAT
Category	Malware
Type	Backdoor
Description	(Nyotron) Some of the compromised servers contained an innovative Google Drive-based RAT under the name Service.exe. The attacker moved Service.exe to C:\Windows\system32 along with a large set of files. These files included DLLs related to the Google API used for communication and more.
Information	<https://www.nyotron.com/collateral/Nyotron-OilRig-Malware-Report-March-2018C.pdf>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.google_drive_rat>

Last change to this tool card: 23 April 2020

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	OilRig, APT 34, Helix Kitten, Chrysene		2014-Sep 2024

1 group listed (1 APT, 0 other, 0 unknown)

APT groups