Evasion

Symantec reveals ransomware group used Teams TURN relay infrastructure to mask command-and-control. First documented abuse of Teams relay for malware C2.

Security researchers expose an active campaign using layered evasion techniques to deliver Remcos RAT through MSBuild abuse and .NET Reactor-protected loaders.

The initial access malware now delivers payloads through deliberately malformed archives that crash security tools while executing normally on Windows.