Product

Shared links / file hosting (abused by third parties)

1 documented issue affecting Shared links / file hosting (abused by third parties), most severe first.

2024 – February 20254 sources

Medium

Dropbox links as the first hop: the AsyncRAT campaign that hid its malware behind Dropbox URLs and TryCloudflare tunnels

Forcepoint X-Labs and The Hacker News documented a phishing campaign that used Dropbox URLs, not attachments, as the first link in a chain — ZIP to internet shortcut to .lnk to JavaScript to .BAT to a malicious Python package — that ultimately deployed AsyncRAT, Venom RAT, and XWorm via temporary TryCloudflare tunnels.

Security Incidents & Data Breaches

Read documentation

← All products A–Z index →Better alternatives →