Evasive Panda Using New CloudScout Toolset to Steal Data From Google Drive, Gmail, and Outlook

A toolset called CloudScout developed by the APT group Evasive Panda is targeting Taiwanese institutions to extract cloud-based data. The attacks, discovered by ESET, exploit session cookies stolen by MgBot plugins to access cloud services.