Page 1 of 3 123 LastLast
  1.    06 Aug 2015 #1
    Join Date : Jan 2014
    Carencro, LA 70520
    Posts : 8,451
    Mint 18.3

    Attackers can access Dropbox, Google Drive, OneDrive files without PW.


    Hackers don't even need your password anymore to get access to your cloud data.

    Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

    The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services. This is not just an issue for consumers, but also businesses, which increasingly use cloud-based services to share sensitive customer and corporate data.

    The report by Imperva, which has a research unit as well as having a commercial stake in the security space, said in some cases "recovery of the account from this type of compromise is not always feasible."

    The attack works by grabbing the password token, a small file that sits on a user's devices for convenience (which saves the user from entering their password each time). When the token is obtained, either through a phishing attack or a drive-by exploit, it can be used to fool a new machine into thinking the attacker is the account's owner. From there, the attacker can access and steal files, and even add malware or ransomware (which is on the rise) to the victim's cloud folder, which can be used for further attacks.

    Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.
    Source
      My ComputerSystem Spec
  2.    06 Aug 2015 #2
    Join Date : Sep 2014
    Posts : 91
    64-bit 10240 10 Pro

    Looks like I will remove one drive
      My ComputerSystem Spec
  3.    06 Aug 2015 #3
    Join Date : May 2015
    Posts : 145
    Windows 10 Pro

    One more reason I don't use and likely never will use any cloud based service.
      My ComputerSystem Spec
  4.    06 Aug 2015 #4
    Join Date : Apr 2014
    Posts : 627
    Windows 10 Pro Insider Preview (14971)

    Quote Originally Posted by stormy13 View Post
    One more reason I don't use and likely never will use any cloud based service.
    (At last I get to use the 'ditto' emoticon!)
      My ComputerSystem Spec
  5.    06 Aug 2015 #5
    Join Date : Mar 2015
    South Central PA
    Posts : 11
    Win 8.1 Pro, Win 10 10041

    Quote Originally Posted by sgage View Post
    (At last I get to use the 'ditto' emoticon!)
    Add another remove to the pile!
      My ComputerSystem Spec
  6.    06 Aug 2015 #6
    Join Date : Apr 2015
    Posts : 12,931
    W10Prox64

    Two-factor authentication thwarts this.
      My ComputerSystem Spec
  7.    06 Aug 2015 #7
    Join Date : Jun 2015
    Posts : 545
    Windows 10 Pro 64bit; Windows 10 TP; KDE Neon

    I have upgraded from Windows 10 Home to Windows 10 Pro just to regain Group Policy so that I will be able to disable OneDrive. It was the first thing I did right after the clean installation of the OS.
      My ComputerSystem Spec
  8.    06 Aug 2015 #8
    Join Date : Oct 2014
    Posts : 1,555
    W7 32 bit, Linux Mint Xfce 18 64 bit

    One drive can't be disabled in windows 10 home.
      My ComputerSystem Spec
  9.    06 Aug 2015 #9
    Join Date : Apr 2014
    Posts : 627
    Windows 10 Pro Insider Preview (14971)

    Quote Originally Posted by groze View Post
    One drive can't be disabled in windows 10 home.
    You can simply not use it - you really don't need to 'disable' anything. You can got into the Task Monitor, and under 'start' disable the PC client from ever booting up. But if you simply don't use it, no problem.
      My ComputerSystem Spec
  10.    06 Aug 2015 #10
    Join Date : Jan 2015
    Texas
    Posts : 219
    Win 10 Pro 64 bit

    Quote Originally Posted by groze View Post
    One drive can't be disabled in windows 10 home.
    That's what she said was the reason she went to 10 Pro.
      My ComputerSystem Spec

 
Page 1 of 3 123 LastLast


Similar Threads
Thread Forum
Onedrive deleted all my files
Why onedrive deleted all my files? I had 20 mp3 on my hard disk after i restarted my pc onedrive deleted all of them and put in trash bin. Any help?
Software and Apps
Replace OneDrive icon in explorer with Google Drive
Anyway to do this? I don't use Onedrive at all, i do use Google Drive, i just want to replace that shortcut to lead to google drive instead of onedrive? maybe editing through regedit? Thanks everyone. 28808
Customization
OneDrive / Dropbox - how do they work?
Hello there, I just updated to Win 10 today from Win 8.1. I've got a DropBox account and app and I use it quite regularly but I'm thinking to try OneDrive since it should be 'more integrated' with the whole OS. I've got a doubt tho, I can...
Software and Apps
Office Introducing the Google Drive plug-in for Microsoft Office
Source: Google Drive Blog: Introducing the Google Drive plug-in for Microsoft Office Download: Google Drive plug-in for Microsoft Office
Windows 10 News
No Google Drive files in Windows search results
I am also asking this question on the Google Product Forums. Basically, the Google Drive folder is synced onto my data partition. Files are present on my HDD, the whole folder is indexed, but nothing inside it comes up in my Windows search...
Software and Apps
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:47.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums