HIGHRansomware
Global

Ransomware gang abuses Microsoft Teams relays to hide malicious traffic

·Source: BleepingComputer

Updated:

Executive Summary

DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure. [...]

Analysis

DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure. [...]
Source Attribution

Originally published by BleepingComputer on Jun 16, 2026.

Related Threats

HIGHRansomware

'Lorem Ipsum' Malware Pivots to ClickFix Delivery

New analysis shows the campaign, which uses compromised WordPress sites, may be linked to the ransomware and data extortion group Vice Society.

Dark Reading
HIGHRansomware

DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company

Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders

Infosecurity Magazine
HIGHRansomware

Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks

How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data

Infosecurity Magazine