Skip to content
The Nexus
DossierENTITY

Backdoor.Turn

Coverage of Backdoor.Turn in the Nexus archive.

Earliest in view: Jun 16 · 10:18 UTCMost recent: Jun 18 · 13:30 UTC
Co-mentioned in this coverage
Microsoft Teamsorganization2DragonForcetopic1Symantecorganization1Carbon Blackorganization1U.S. services firmorganization1DragonForceorganization1
Recent coverage
  • SECURITYJun 18 · 13:30 UTCTHE HACKER NEWS
    DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

    Threat actors linked to DragonForce ransomware used Backdoor.Turn, a custom Go-based remote access trojan, to conceal command-and-control traffic via Microsoft Teams relay infrastructure. The malware was deployed against a major U.S. services firm, according to Symantec and Carbon Black.

  • SECURITYJun 16 · 10:18 UTCBLEEPING COMPUTER
    Ransomware gang abuses Microsoft Teams relays to hide malicious traffic

    The DragonForce ransomware gang used a custom malware named 'Backdoor.Turn' to conceal command-and-control traffic within Microsoft Teams' relay infrastructure. This method allowed malicious activity to evade detection by leveraging legitimate communication channels.