A built-in Google Workspace feature became a Chinese espionage group’s favourite exfiltration tool (opens in new tab)

A China-linked espionage group spent more than a year inside North American medical, academic, and military research networks, stealing sensitive data and defence email. The attackers got in through a backdoor on REDCap research servers. The exfiltration method was the unusual part: they rewired the victims’ own Google Workspace rules to copy matching messages to […] at The Next Web