New malware turns Microsoft 365 and Azure into its control center

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure.
腾讯网

新型恶意软件将微软365和Azure变为控制中枢

安全研究人员近日发出警告，一个新发现的Python恶意软件框架正通过微软服务来路由其大部分命令与控制（C2）流量，而这些服务正是防御人员日常预期会看到的正常流量。
CSOonline

New Malware turns Microsoft cloud into its control center

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure. Security researchers are warning of a newly ...