Google Drive And Dropbox Used By APT29 To Deliver Malicious Payloads

Organizations around the world rely on the use of trusted, reliable online storage services - such as DropBox and Google Drive - to conduct day-to-day operations.
However, Palo Alto's latest research shows that threat actors are finding ways to take advantage of that trust to make their attacks extremely difficult to detect and prevent.
The latest campaigns conducted by an advanced persistent threat (APT) that is tracked by Palo Alto as Cloaked Ursa (also known as APT29, Nobelium or Cozy Bear) demonstrate sophistication and the ability to rapidly integrate popular cloud storage services to avoid detection.