Skip to content
Threat Feed

Actor

Webworm

1 brief RSS
high threat

Webworm APT Updates TTPs with Discord and Microsoft Graph C2

The Webworm APT group is using updated tactics, techniques, and procedures, including new backdoors using Discord and Microsoft Graph API for command and control, custom proxy tools, and GitHub for malware staging, shifting focus to European governmental organizations.

Microsoft Graph API +4 Webworm apt discord proxy tool
2r 10t 1c 1i