Tag: backdoor.turn

1 Attack Reports | 0 Vulnerabilities

Attack reports

Attackers Weaponize Microsoft Teams Relays to Stay Hidden

Attackers deploying DragonForce ransomware against a major U.S. services firm concealed their command-and-control traffic within Microsoft Teams relay infrastructure using Backdoor.Turn, a custom Go-based remote access trojan. This novel technique leverages anonymous Teams visitor tokens and TURN r…
ransomware
credential theft
byovd
dll side-loading
dragonforce
CVE-2025-1055
CVE-2025-61155
vulnerable drivers
2026-06-16
backdoor.turn
CVE-2023-52271
microsoft teams abuse
turn relay
Published: June 16, 2026
Linked vulnerabilities : CVE-2025-1055 (CVSS 5.6), CVE-2025-61155, CVE-2023-52271
Downloadable IOCs: 18
Click here to see more Attack Reports