Page 1 of 3 123 LastLast

  1. Joined : Jan 2014
    Carencro, LA 70520
    Posts : 7,632
    Windows 10
       06 Aug 2015 #1

    Attackers can access Dropbox, Google Drive, OneDrive files without PW.


    Hackers don't even need your password anymore to get access to your cloud data.

    Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

    The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services. This is not just an issue for consumers, but also businesses, which increasingly use cloud-based services to share sensitive customer and corporate data.

    The report by Imperva, which has a research unit as well as having a commercial stake in the security space, said in some cases "recovery of the account from this type of compromise is not always feasible."

    The attack works by grabbing the password token, a small file that sits on a user's devices for convenience (which saves the user from entering their password each time). When the token is obtained, either through a phishing attack or a drive-by exploit, it can be used to fool a new machine into thinking the attacker is the account's owner. From there, the attacker can access and steal files, and even add malware or ransomware (which is on the rise) to the victim's cloud folder, which can be used for further attacks.

    Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.
    Source
      My System SpecsSystem Spec


  2. Joined : Sep 2014
    Posts : 92
    64-bit 10240 10 Pro
       06 Aug 2015 #2

    Looks like I will remove one drive
      My System SpecsSystem Spec


  3. Joined : May 2015
    Posts : 125
    Windows 10
       06 Aug 2015 #3

    One more reason I don't use and likely never will use any cloud based service.
      My System SpecsSystem Spec


  4. Joined : Apr 2014
    Posts : 599
    Windows 10 Pro Insider Preview (14971)
       06 Aug 2015 #4

    stormy13 said: View Post
    One more reason I don't use and likely never will use any cloud based service.
    (At last I get to use the 'ditto' emoticon!)
      My System SpecsSystem Spec


  5. Joined : Mar 2015
    South Central PA
    Posts : 11
    Win 8.1 Pro, Win 10 10041
       06 Aug 2015 #5

    sgage said: View Post
    (At last I get to use the 'ditto' emoticon!)
    Add another remove to the pile!
      My System SpecsSystem Spec


  6. Joined : Apr 2015
    Posts : 9,150
    W10Prox64
       06 Aug 2015 #6

    Two-factor authentication thwarts this.
      My System SpecsSystem Spec


  7. Joined : Jun 2015
    Posts : 424
    Windows 10 Pro 64bit; Windows 10 TP
       06 Aug 2015 #7

    I have upgraded from Windows 10 Home to Windows 10 Pro just to regain Group Policy so that I will be able to disable OneDrive. It was the first thing I did right after the clean installation of the OS.
      My System SpecsSystem Spec


  8. Joined : Oct 2014
    Posts : 1,541
    W7 32 bit, Linux Mint Xfce 18 64 bit
       06 Aug 2015 #8

    One drive can't be disabled in windows 10 home.
      My System SpecsSystem Spec


  9. Joined : Apr 2014
    Posts : 599
    Windows 10 Pro Insider Preview (14971)
       06 Aug 2015 #9

    groze said: View Post
    One drive can't be disabled in windows 10 home.
    You can simply not use it - you really don't need to 'disable' anything. You can got into the Task Monitor, and under 'start' disable the PC client from ever booting up. But if you simply don't use it, no problem.
      My System SpecsSystem Spec

  10.    06 Aug 2015 #10

    groze said: View Post
    One drive can't be disabled in windows 10 home.
    That's what she said was the reason she went to 10 Pro.
      My System SpecsSystem Spec


 
Page 1 of 3 123 LastLast


Similar Threads
Thread Forum
Onedrive deleted all my files
Why onedrive deleted all my files? I had 20 mp3 on my hard disk after i restarted my pc onedrive deleted all of them and put in trash bin. Any help?
Software and Apps
Replace OneDrive icon in explorer with Google Drive
Anyway to do this? I don't use Onedrive at all, i do use Google Drive, i just want to replace that shortcut to lead to google drive instead of onedrive? maybe editing through regedit? Thanks everyone. 28808
Customization
OneDrive / Dropbox - how do they work?
Hello there, I just updated to Win 10 today from Win 8.1. I've got a DropBox account and app and I use it quite regularly but I'm thinking to try OneDrive since it should be 'more integrated' with the whole OS. I've got a doubt tho, I can...
Software and Apps
Office Introducing the Google Drive plug-in for Microsoft Office
Source: Google Drive Blog: Introducing the Google Drive plug-in for Microsoft Office Download: Google Drive plug-in for Microsoft Office
Windows 10 News
No Google Drive files in Windows search results
I am also asking this question on the Google Product Forums. Basically, the Google Drive folder is synced onto my data partition. Files are present on my HDD, the whole folder is indexed, but nothing inside it comes up in my Windows search...
Software and Apps
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:34.
Find Us
Twitter Facebook Google+



Windows 10 Forums