Some Dropbox Process Is Opening Documents
September 12th, 2013Via: WNCInfoSec:
So now I’m curious…are the files being accessed for de-duplication purposes or possibly malware scanning? If so, then why are the other file types not being opened? It appears that only .doc files are being opened…
I then uploaded more HoneyDocs files to my Dropbox folder, this time from a different computer and ISP to rule out any of those variables.
All .doc embedded HoneyDocs appear to have been accessed…from different Amazon EC-2 instance IPs.
