Microsoft OneDrive a willing and eager 'ransomware double agent'
, OneDrive was a ready and willing double agent he was able to turn against the systems it's designed to sync cloud storage for, and ostensibly protect.."OneDrive is used for ransomware data recovery, and Microsoft even recommends that users store important files in OneDrive because they're better protected in the cloud."
The first thing one would do in order to turn OneDrive into a double agent, then, would be to hijack someone's account – a task Yair said was relatively easy once he managed to achieve an initial compromise of a Windows machine. Getting out of OneDrive's own directories was simple enough – Yair said that while symbolic links can only be created by an administrator , junctions can be created by anyone, but can only point to a directory, not a specific file.
OneDrive includes features that prevent ransomware from destroying backups by ensuring there are shadow copies of files that can be restored in case of an attack, though Yair says he was able to subvert those features too, with the OneDrive app for Android being the weak point in that instance.
Danmark Seneste Nyt, Danmark Overskrifter
Similar News:Du kan også læse nyheder, der ligner denne, som vi har indsamlet fra andre nyhedskilder.
Microsoft, Intel lead this month's security fix emissionsDownfall processor leaks, Teams holes, VPN clients at risk, and more
Læs mere »
New weekly Xbox Game Pass Quests are now live for another 275 Microsoft Reward PointsThe new weekly Xbox Game Pass quests are now live. We've got the roundup of every quest on offer, how to complete them, and how many Microsoft Rewards Points you'll get for doing so.
Læs mere »
Harry Kane 'offered huge contract to join another club' in latest twist to transfer sagaA third club have offered Tottenham star Harry Kane a huge contract to join them as a free agent next summer, according to a new report.
Læs mere »
A True New Yorker Would Never Sell Carrie Bradshaw’s ApartmentA real estate agent does the math on Carrie's latest wild decision on 'And Just Like That...'
Læs mere »
Colorado education dept confirms ransomware intrusionCyber-extortionists pillage Colorado education dept
Læs mere »