aiqbench takeAI Safety

This article details a sophisticated threat actor utilizing Microsoft Graph APIs within Microsoft 365 as the exclusive command-and-control channel for the Antino Windows backdoor, marking a significant evolution in cloud-based malware persistence. The campaign targets critical infrastructure and government entities across multiple nations, leveraging trusted enterprise interfaces to bypass traditional email defenses while conducting intelligence gathering rather than financial theft. For AI and quantum sectors, this underscores the vulnerability of integrated cloud ecosystems where security boundaries are increasingly blurred between user-facing applications and backend control logic.

Source coveringCybersecurity News

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365

Cybersecurity NewsOctober 1, 20265 min read

Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns Outlook messages and OneDrive files into channels for issuing instructions, moving stolen data, and maintaining access to compromised computers. The wider campaign began in September 2025 and targeted government, defense, diplomatic, academic, […] The post Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365 appeared first on Cyber Security News.

Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns Outlook messages and OneDrive files into channels for issuing instructions, moving stolen data, and maintaining access to compromised computers. The wider campaign began in September 2025 and targeted government, defense, diplomatic, academic, and policy organizations. Attackers used carefully tailored phishing emails, convincing documents, and fake software installers to deliver the backdoor, combining familiar interfaces with cloud services that organizations routinely trust. Researchers from…

Excerpt shown under the publisher's RSS terms · 86 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article