NEW MALWARE TURNS MICROSOFT 365 AND AZURE INTO ITS CONTROL CENTER

Summary from the TLDR IT newsletter

TWINLOOT hides its command-and-control traffic inside trusted Microsoft services, using SharePoint, Teams infrastructure, Microsoft Graph, and even the victim's own Edge browser. The malware can steal credentials and tunnel into internal systems while much of its activity appears to originate from legitimate Microsoft infrastructure, making behavioral and identity-based detection more important.