NANOREMOTE Malware Leverages Google Drive API for Command-and-Control (C2) to Attack Windows Systems

Cybersecuritynews •Tushar Subhra Dutta • December 12, 2025

A sophisticated new Windows backdoor named NANOREMOTE emerged in October 2025, presenting a significant threat to enterprise environments by leveraging legitimate cloud infrastructure for malicious purposes. This fully-featured malware utilizes the Google Drive API as its primary Command-and-Control (C2) channel, allowing threat actors to blend their malicious traffic seamlessly with normal network activity. By abusing […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NANOREMOTE Malware Exploits Google Drive API for C2 on Windows Systems In October 2025, a new Windows backdoor named NANOREMOTE was identified, utilizing the Google Drive API for its Command-and-Control (C2) operations. This malware presents a significant risk to enterprise environments by disguising its malicious traffic within legitimate cloud infrastructure, making detection challenging. 3 sources 38

Extracted Entities

NANOREMOTE Malware Leverages Google Drive API for Command-and-Control (C2) to Attack Windows Systems

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)

Tools (2)