Hacking the Cloud on Mythryl: “Can attackers hide GCP projects in plain sight? Apps Script projects…”

Can attackers hide GCP projects in plain sight? Apps Script projects create hidden sys-* folders invisible in the console. Attackers can mimic this naming convention to stash service accounts or compute instances where no one looks.

buff.lyApps Script project impersonation / Google Apps Script persistence - Hacking The CloudGoogle Workspace Apps Script projects create hidden GCP projects (sys-<...>) that can be impersonated by attackers. This technique enables stealthy persistence (service accounts, hidden compute,…

18/3/26, 2:02 pm0 reposts1 like

Post