Signals

Cybersecurity researchers have identified fresh activity from Webworm, a China-linked threat group, deploying custom backdoors that use Discord and Microsoft Graph API for command-and-control communications. The group, first documented in 2022, continues to target government agencies.