APT36 LOTS C2 Communication to Google Sheets API

Georg Lauenstein@gsec

•updated Mar 16, 2026•1•0•44

Detects network connections to Google Sheets API endpoints indicative of Living Off Trusted Services C2 technique