A dropzone is a server in the Internet that receives and stores the data collected by malware on a victim system. Typical protocols to transfer the data to the dropzone are HTTP or FTP. The data normally is stored and transferred encrypted.
By using a dropzone an attacker has not to be online all the time. From time to time he can check the dropzone for newly arrived data.