firebasestorage.googleapis.com

Phishing Exfiltration C&C Download

Attackers can use firebasestorage.googleapis.com to host their phishing websites.

Attackers can use firebasestorage.googleapis.com as their C&C server.

Attackers can push data onto firebasestorage.googleapis.com storage. The file types that can be pushed are restricted.

Attackers can host malicious files on firebasestorage.googleapis.com and when needed, the files can be downloaded.

https://www.joesandbox.com/analysis/500007/0/html