TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-18 12:38 UTC
  • Importiert: 2026-08-25 11:44 UTC
  • Quelle-ID: thn_global
  • uid_hash: d69a94c59fa3978640fcfb368c6a4d689e289fb7fbbf991a4b48e3fcf40131e7

Inhalt

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT.

"TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a technical report shared with The Hacker News. "Tasking flows through SharePoint Online file

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews