Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.
OriginLebanon
SponsorLebanon
MotivationEspionage
Target Sectors
Critical manufacturingDefense industrial baseFinancial servicesFood and agricultureGovernment agencies and servicesHealthcarePharmaceuticalsInformation technologyTransportation systemsNGOsCivil SocietyMilitaryDefense