Havoc: SharePoint with Microsoft Graph API turns into FUD C2

ForitGuard Lab reveals a modified Havoc deployed by a ClickFix phishing campaign. The threat actor hides each stage behind SharePoint and also uses it as a C2. Learn more.

      

This article has been indexed from Fortinet Threat Research Blog

Read the original article: