New Malware Uses Outlook and Microsoft Graph API for Covert Communication

Elastic Security Labs has uncovered a new malware strain, named FINALDRAFT, that exploits Microsoft Outlook and the Microsoft Graph API for covert command-and-control (C2) communications. This advanced malware, discovered during an investigation into a foreign ministry breach, represents a growing trend of cybercriminals abusing legitimate cloud services to mask malicious activities. The campaign, attributed to … Continue reading New Malware Uses Outlook and Microsoft Graph API for Covert Communication