Recent espionage campaigns by sophisticated advanced persistent threat (APT) groups demonstrate the appeal of leveraging Dropbox’s encrypted channels. Dropbox relies on such encrypted traffic to protect data in transit, yet is exploited by these hidden attacks. 3 Threat actors hide malware inside encrypted traffic, enabling their attacks to bypass detection. 2 More than 30% of all SSL-based attacks hide in collaboration services like Dropbox. Dropbox's Encrypted Channels Allow Threat Actors to Blend Normal TrafficĪ 260% increase in using encrypted Secure Sockets Layer/Transport Layer Security (SSL/TLS) traffic to hide cyber attacks occurred in the first nine months of 2020, according to security company Zscaler.

1 The file-sharing company seeks to enhance collaboration and information-sharing within a distributed workforce, both now and in the future.Īs Dropbox and other businesses continue to adjust to new workplace requirements, threat actors are increasingly leveraging their services for attacks. Updates to Dropbox Spaces, a project management tool, reflect this shift, easing communications for remote work. Users quickly adopted the cloud storage tool Dropbox at the start of the COVID-19 pandemic to alleviate file sharing issues and facilitate group work.

Dropbox security