Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration

DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure.

Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration