CERT24Ransomware gang abuses Microsoft Teams to hide malicious trafficLoading data…
CERT24Threat Observatory
Period

Ransomware gang abuses Microsoft Teams to hide malicious traffic

The DragonForce ransomware operation used custom malware named Backdoor.Turn to hide command-and-control traffic inside Microsoft Teams TURN relay infrastructure. The attack targeted a major U.S. services company, after which the attackers exfiltrated data and encrypted the victim’s systems with DragonForce ransomware.

← Back to intelligence

Ransomware gang abuses Microsoft Teams to hide malicious traffic

The DragonForce ransomware operation used custom malware named Backdoor.Turn to hide command-and-control traffic inside Microsoft Teams TURN relay infrastructure. The attack targeted a major U.S. services company, after which the attackers exfiltrated data and encrypted the victim’s systems with DragonForce ransomware.