Linux GoGra backdoor hides commands in Outlook mailboxes using Microsoft Graph
VPN Central [Unofficial]
April 25, 2026
A newly reported Linux version of the GoGra backdoor uses Microsoft Outlook mailboxes as its command channel, helping attackers blend malicious traffic into normal cloud activity. Symantec says the malware communicates through Microsoft Graph API and polls a real Outlook mailbox folder for instructions, which makes network detection much harder if defenders mostly look for […]
The post Linux GoGra backdoor hides commands in Outlook mailboxes using Microsoft Graph appeared first on VPN Central.
Discussion in the ATmosphere