18 June 2026 - 18:21

Category: IT Fail

Teams is now a malware transit lounge.

DragonForce ransomware hackers are hiding their custom backdoor command traffic right inside Microsoft Teams relays. Because why use a sneaky cover when Teams does it for you?

Teams is now a malware transit lounge.

Source: The Hacker News

The Full Story

Severity: High Mood: Frustrating

Enterprise networks relying on Microsoft Teams for office gossip are now hosting DragonForce hackers, who are routing their custom Go-based 'Backdoor.Turn' traffic directly through Microsoft's own relays. It is a wonderfully cheeky way to bypass standard firewalls that trust Teams blindly. To defend against this cheeky intrusion, defenders must actively inspect and monitor traffic patterns, rather than blindly assuming every byte flowing through corporate chat tools is just another pointless status update.

#teamsissues #hidinginplain
Open article →