Attackers Weaponize Microsoft Teams Relays to Stay Hidden

Reported 16 Jun 2026 by otx · Severity: medium

Attackers deploying DragonForce ransomware against a major U.S. services firm concealed their command-and-control traffic within Microsoft Teams relay infrastructure using Backdoor.Turn, a custom Go-based remote access trojan. This novel technique leverages anonymous Teams visito