A built-in Google Workspace feature became a Chinese espionage group’s favourite exfiltration tool

A China-linked espionage group spent more than a year inside North American medical, academic, and military research networks, stealing sensitive data and defence email. The attackers got in through a backdoor on REDCap research servers. The exfiltration method was the unusual part: they rewired the victims’ own Google Workspace rules to copy matching messages to […] This story continues at The Next Web