Backdoor

Rubrik Zero Labs uncovered GraphFleet, a Windows backdoor that runs its command-and-control through Microsoft 365 calendars, Outlook drafts, To Do and OneDrive while signing in as Microsoft Teams with stolen OAuth tokens.