Windows 10: Attackers can access Dropbox, Google Drive, OneDrive files without PW.

Page 1 of 3 123 LastLast

  1. Posts : 7,882
    Windows 10
       06 Aug 2015 #1

    Attackers can access Dropbox, Google Drive, OneDrive files without PW.


    Hackers don't even need your password anymore to get access to your cloud data.

    Newly published research, released at the Black Hat conference in Las Vegas on Wednesday by security firm Imperva, shows how a "man-in-the-cloud" attack can grab cloud-based files -- as well as infecting users with malware -- without users even noticing.

    The attack differs from traditional man-in-the-middle attacks, which rely on tapping data in transit between two servers or users, because it exploits a vulnerability in the design of many file synchronization offerings, including Google, Box, Microsoft, and Dropbox services. This is not just an issue for consumers, but also businesses, which increasingly use cloud-based services to share sensitive customer and corporate data.

    The report by Imperva, which has a research unit as well as having a commercial stake in the security space, said in some cases "recovery of the account from this type of compromise is not always feasible."

    The attack works by grabbing the password token, a small file that sits on a user's devices for convenience (which saves the user from entering their password each time). When the token is obtained, either through a phishing attack or a drive-by exploit, it can be used to fool a new machine into thinking the attacker is the account's owner. From there, the attacker can access and steal files, and even add malware or ransomware (which is on the rise) to the victim's cloud folder, which can be used for further attacks.

    Making matters worse, account owners are almost powerless. Because the tokens are tied to the user's device, changing the account password would not lock out the attacker.
    Source
      My ComputerSystem Spec


  2. Posts : 92
    64-bit 10240 10 Pro
       06 Aug 2015 #2

    Looks like I will remove one drive
      My ComputerSystem Spec

  3.    06 Aug 2015 #3

    One more reason I don't use and likely never will use any cloud based service.
      My ComputerSystem Spec


  4. Posts : 605
    Windows 10 Pro Insider Preview (14971)
       06 Aug 2015 #4

    stormy13 said: View Post
    One more reason I don't use and likely never will use any cloud based service.
    (At last I get to use the 'ditto' emoticon!)
      My ComputerSystem Spec


  5. Posts : 11
    Win 8.1 Pro, Win 10 10041
       06 Aug 2015 #5

    sgage said: View Post
    (At last I get to use the 'ditto' emoticon!)
    Add another remove to the pile!
      My ComputerSystem Spec


  6. Posts : 11,223
    W10Prox64
       06 Aug 2015 #6

    Two-factor authentication thwarts this.
      My ComputerSystem Spec


  7. Posts : 510
    Windows 10 Pro 64bit; Windows 10 TP; KDE Neon
       06 Aug 2015 #7

    I have upgraded from Windows 10 Home to Windows 10 Pro just to regain Group Policy so that I will be able to disable OneDrive. It was the first thing I did right after the clean installation of the OS.
      My ComputerSystem Spec


  8. Posts : 1,546
    W7 32 bit, Linux Mint Xfce 18 64 bit
       06 Aug 2015 #8

    One drive can't be disabled in windows 10 home.
      My ComputerSystem Spec


  9. Posts : 605
    Windows 10 Pro Insider Preview (14971)
       06 Aug 2015 #9

    groze said: View Post
    One drive can't be disabled in windows 10 home.
    You can simply not use it - you really don't need to 'disable' anything. You can got into the Task Monitor, and under 'start' disable the PC client from ever booting up. But if you simply don't use it, no problem.
      My ComputerSystem Spec

  10.    06 Aug 2015 #10

    groze said: View Post
    One drive can't be disabled in windows 10 home.
    That's what she said was the reason she went to 10 Pro.
      My ComputerSystem Spec


 
Page 1 of 3 123 LastLast

Related Threads
Onedrive deleted all my files in Software and Apps
Why onedrive deleted all my files? I had 20 mp3 on my hard disk after i restarted my pc onedrive deleted all of them and put in trash bin. Any help?
Anyway to do this? I don't use Onedrive at all, i do use Google Drive, i just want to replace that shortcut to lead to google drive instead of onedrive? maybe editing through regedit? Thanks everyone. 28808
Hello there, I just updated to Win 10 today from Win 8.1. I've got a DropBox account and app and I use it quite regularly but I'm thinking to try OneDrive since it should be 'more integrated' with the whole OS. I've got a doubt tho, I can...
Source: Google Drive Blog: Introducing the Google Drive plug-in for Microsoft Office Download: Google Drive plug-in for Microsoft Office
I am also asking this question on the Google Product Forums. Basically, the Google Drive folder is synced onto my data partition. Files are present on my HDD, the whole folder is indexed, but nothing inside it comes up in my Windows search...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:17.
Find Us