Some Dropbox Process Is Opening Documents

September 12th, 2013

Via: WNCInfoSec:

So now I’m curious…are the files being accessed for de-duplication purposes or possibly malware scanning? If so, then why are the other file types not being opened? It appears that only .doc files are being opened…

I then uploaded more HoneyDocs files to my Dropbox folder, this time from a different computer and ISP to rule out any of those variables.

All .doc embedded HoneyDocs appear to have been accessed…from different Amazon EC-2 instance IPs.

Leave a Reply

You must be logged in to post a comment.