TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
- Posted on August 18, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
TWINLOOT uses SharePoint, Teams TURN, and headless Edge for C2, steals Windows credentials, and opens SOCKS5 access into victim networks.
