148: Dubsnatch

3602.791 - 3625.402 Jack Recider

They were grabbing things, but they were also being smart at trying to establish persistence. If the owners of these accounts changed the passwords, they'd be locked out. So they created share links so that even if the account gets locked out, they could see what files are being uploaded later. Cool. but you can really take this to crazy levels. I'm talking about creating ghost logins.