Cybersecurity researchers warn of ongoing attacks coordinated by a suspected Chinese-speaking threat actor targeting the Afghanistan government. Israeli cybersecurity firm Check Point Research attributed the intrusions to a hacking group tracked under the moniker “IndigoZebra,” with past activity aimed at other central-Asian countries, including Kyrgyzstan and Uzbekistan. The attacks funneled malicious commands into the victim machine that were camouflaged using the Dropbox API, with the implant creating a unique folder for every compromised host in an attacker-controlled Dropbox account.
Source: https://thehackernews.com/2021/07/indigozebra-apt-hacking-campaign.html