Cybersecurity researchers have uncovered a new Python-based implant framework called TWINLOOT that abuses trusted Microsoft services for command-and-control (C2) operations. The malware,…
msaRAT is a Rust-based remote access trojan attributed to the Chaos ransomware group. It uses a headless browser and WebRTC DataChannels via…
msaRAT uses Twilio TURN relays to establish WebRTC DataChannels between the browser and C2 server.
In 2021, FingerprintJS disclosed a WebRTC-based mechanism that leaked a client's real IP address despite iCloud Private Relay being enabled. This earlier…
WebRTC was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate…
TWINLOOT and other malware abuse Microsoft Teams TURN servers to relay WebRTC DataChannels for interactive operator access.