DigitalOcean allows users to create a customized subdomain on digitaloceanspaces.com. Attackers abuse this functionality by hosting phishing websites.
Command and Control
*.digitaloceanspaces.com subdomains can be used as C&C servers.
Attackers can upload exfiltrated data onto applications hosted on *.digitaloceanspaces.com
Attackers can host malicious tools on *.digitaloceanspaces.com and download them when required.
Last Update: 2021-11-14