“Researchers at the security startup Shape Security say they’ve found a strain of malware on a client’s network that uses that new, furtive form of ‘command and control’—the communications channel that connects hackers to their malicious software—allowing them to send the programs updates and instructions and retrieve stolen data. Because the commands are hidden in unassuming Gmail drafts that are never even sent, the hidden communications channel is particularly difficult to detect.”
Source: Hackers Are Using Gmail Drafts to Update Their Malware and Steal Data | WIRED
