Cybercriminals mask malicious communications through Microsoft Teams relays
The DragonForce ransomware group has been identified using Microsoft Teams TURN relay infrastructure to mask malicious command-and-control traffic. This novel technique allowed attackers to hide their activities within legitimate network traffic for months.
Why it matters
This represents a sophisticated evolution in cyberattack tactics, exploiting trusted enterprise communication tools to evade security monitoring.
Cybercriminals mask malicious communications through Microsoft Teams relays The DragonForce ransomware group used a custom malware called Backdoor.Turn to hide command-and-control traffic inside Microsoft Teams relay infrastructure during an intrusion at a U.S. services company, according to Symantec.
The article is a technical report on cybersecurity threats.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in