GraphWorm Malware Uses Microsoft OneDrive to Hide Its Command Traffic
VPN Central [Unofficial]
May 22, 2026
Security researchers have uncovered a new backdoor called GraphWorm that uses Microsoft OneDrive as part of its command-and-control system. The malware belongs to Webworm, a China-aligned cyber-espionage group that has continued to refresh its toolkit and move toward stealthier cloud-based tactics. The main concern is simple: GraphWorm does not rely on an obviously suspicious server […]
The post GraphWorm Malware Uses Microsoft OneDrive to Hide Its Command Traffic appeared first on VPN Central.
Discussion in the ATmosphere