DriveOcean

Aliases: Google Drive RAT

Malware type
rat
Family
Malware family
Profile updated
2026-07-07 14:55:05

Targeted industries: government-and-public-sector technology-and-telecommunications

Context

DriveOcean, also known as Google Drive RAT, is a remote access trojan that communicates via Google Drive. It exploits cloud platforms to bypass traditional network defenses and is used for espionage and data exfiltration.

Reports & references

  • cert.ssi.gouv.fr — Certfr 2023 Cti 009 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Driveocean (report)
  • Trend Micro — Pawn Storm Lack Of Sophistication As A Strategy (report)

External references