Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12
VMRay demo shows malware hiding C2 in Microsoft Teams servers
Original: One low-severity alert from a # CyberChess2026 talk by VMRay: DbgView64.exe - signed by Microsoft - sending encrypted tr
At CyberChess2026, VMRay researchers presented a low-severity alert involving DbgView64.exe, a Microsoft-signed tool, sending encrypted traffic to Microsoft infrastructure. The traffic was identified as Backdoor.Turn, with command-and-control relayed through Microsoft Teams' TURN servers, making the destination effectively impossible to block without disrupting Teams itself. The case highlights how attackers abuse trusted cloud services and legitimate signed binaries to blend malicious traffic into normal enterprise activity.
Why now: The abuse of trusted Microsoft Teams infrastructure for malware C2 traffic is a striking example of attackers hiding inside services enterprises cannot block.
VMRayMicrosoft TeamsDbgView64.exeCyberChess2026Backdoor.Turn
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4042633