The DoNot APT threat group is leveraging the legitimate Google Firebase Cloud Messaging server as a command-and-control (C2) communication mechanism.

Misconfigurations in Google Firebase databases allow unauthorized parties to find and access personal data of users.