Exfiltration Over Web Service: Exfiltration to Cloud Storage

Threat Actors may exfiltrate data to a cloud storage service rather than over their primary command and control channel. Cloud storage services allow for the storage, edit, and retrieval of data from a remote cloud storage server over the Internet.

ID: ATAGS-T1203.002
Sub-technique of:  ATAGS-T1203
Tactic: Exfiltration
Targeted Components: Network Transport
Responsibility: Shared
Created: 18 April 2026
Last Modified: 18 April 2026

Mitigations

This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.