*.digitaloceanspaces.com

Phishing Download Exfiltration C&C

DigitalOcean allows users to create a customized subdomain on digitaloceanspaces.com. Attackers abuse this functionality by hosting phishing websites.

*.digitaloceanspaces.com subdomains can be used as C&C servers.

Attackers can upload exfiltrated data onto applications hosted on *.digitaloceanspaces.com

Attackers can host malicious tools on *.digitaloceanspaces.com and download them when required.

https://www.joesandbox.com/analysis/495306/0/html