18 June 2026 - 18:21
Category: IT Fail
Teams is now a malware transit lounge.
DragonForce ransomware hackers are hiding their custom backdoor command traffic right inside Microsoft Teams relays. Because why use a sneaky cover when Teams does it for you?
Source: The Hacker News
The Full Story
Enterprise networks relying on Microsoft Teams for office gossip are now hosting DragonForce hackers, who are routing their custom Go-based 'Backdoor.Turn' traffic directly through Microsoft's own relays. It is a wonderfully cheeky way to bypass standard firewalls that trust Teams blindly. To defend against this cheeky intrusion, defenders must actively inspect and monitor traffic patterns, rather than blindly assuming every byte flowing through corporate chat tools is just another pointless status update.