Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine ...

Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders ...

Cato Networks tracked Poisson using OpenSSH and Tailscale to maintain access after Havoc C2 outage in a 33-day intrusion.

DragonForce ransomware operators are using a new backdoor that relies on Microsoft Teams relay servers for C&C.

The comments on some Steam Profiles are actually loaded with invisible malware.

Zimperium's zLabs found Rokarolla, an Android banking trojan with 137 commands that steals PINs, intercepts SMS, hijacks crypto payments, and kills Play Protect.

Aquabotv3 is actively exploiting a known vulnerability in Mitel devices to include them in its botnet, according to Akamai's Security Intelligence and Response Team. A third variant of the Mirai-based ...