China’s APT41 has brought a whole new meaning to ‘calendar blocking.’ With their latest innovation, TOUGHPROGRESS, they’ve turned Google Calendar from a meeting reminder tool to a playground for malware command-and-control operations. Because who really needs to remember birthdays when you can orchestrate global cyber espionage?
Google, always eager to reveal their latest unwitting service update, confessed that not only was their calendar co-opted for this digital circus, but it was also done on the back of a compromised government website. It’s like they say: if you can’t get an invite, just crash the system and make your own party.
Cloud services have never been this misused since that one time someone tried to upload their entire cat video collection to iCloud. But hey, at least it’s good to know APT41 is thinking outside the box—or at least, outside their own firewall.
Leave a Reply