DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

The DragonForce hacker group has been discovered using Microsoft Teams relay servers to conceal command and control traffic for the Backdoor.Turn malware. By routing their malicious communications through legitimate Microsoft infrastructure, the attackers can effectively hide their activities from traditional security monitoring tools, making the backdoor operations much harder to detect. This technique represents a sophisticated evolution in how threat actors abuse trusted enterprise communication platforms to maintain persistent access to compromised networks.