Figure 5 HTTP POST request to obtain an OAUTH access token Figure 5 shows that the Trojan then uses the following regular expression to obtain the access token from the HTTP response: \”access_token\”:(.*) Once authenticated with a valid access token, the Trojan will attempt to upload a file to the Google Drive account