External Publication
Visit Post

GraphWorm Malware Uses Microsoft OneDrive to Hide Its Command Traffic

VPN Central [Unofficial] May 22, 2026
Source
Security researchers have uncovered a new backdoor called GraphWorm that uses Microsoft OneDrive as part of its command-and-control system. The malware belongs to Webworm, a China-aligned cyber-espionage group that has continued to refresh its toolkit and move toward stealthier cloud-based tactics. The main concern is simple: GraphWorm does not rely on an obviously suspicious server […] The post GraphWorm Malware Uses Microsoft OneDrive to Hide Its Command Traffic appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...