Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.
Also known as
Plaid Rain, UNC4453, GREATRIFT, INCENDIARY JACKAL.
References
Actor metadata imported from Malpedia (Fraunhofer FKIE).