TWINLOOT implant uses Microsoft services for stealthy C&C
TWINLOOT is a modular Python implant that keeps its C&C infrastructure inside trusted Microsoft services like SharePoint Online, Microsoft Graph API and Microsoft Teams TURN servers.
4 min read