Cyber Service Providers Cloudflare Workers: Used by msaRAT for Signaling August 18, 2026 ♡Follow0 msaRAT uses Cloudflare Workers for WebRTC signaling, offloading HTTP connections to the browser via CDP. Discovered from: TWINLOOT Malware Abuses SharePoint and Teams to Steal Credentials and Pivot Networks Cloudflare WorkerssignalingWebRTC