> TritonInfoSec News
Home / Jun 19, 2026 / Story
0
#7 The Hacker News general June 18, 2026 at 13:30 UTC

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

By [email protected] (The Hacker News)

AI Summary

DragonForce ransomware operators deployed a custom Go-based RAT called Backdoor.Turn that conceals C2 traffic inside Microsoft Teams relay infrastructure, as observed by Symantec and Carbon Black in an attack against a major U.S. services firm. Abusing legitimate collaboration platform infrastructure for C2 communications makes this technique particularly difficult to detect with traditional network monitoring.

Read full article → https://thehackernews.com/2026/06/dragonforce-hack…

Relevance score: 82.0/100

# More from June 19

  1. 1
    Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp BleepingComputer
  2. 2
    Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push SecurityWeek
  3. 3
    ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm Krebs on Security
  4. 4
    F5 issues out-of-band patches for critical NGINX vulnerabilities BleepingComputer
  5. 5
    Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure SecurityWeek
  6. 6
    Killing me gently: Inside Gentlemen’s EDR killer framework WeLiveSecurity (ESET)
  7. 8
    Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks BleepingComputer
  8. 9
    Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April CyberScoop
  9. 10
    INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 The Hacker News