Ransomware gang abuses Microsoft Teams relays to hide malicious traffic

DragonForce ransomware utilized a custom malware, Backdoor.Turn, to conceal command-and-control traffic by leveraging Microsoft Teams’ TURN protocol. This technique allowed the attackers to bypass traditional network defenses and operate within trusted networks. The operation, linked to the Scattered Spider group, invo…