Cybersecurity · 27 views
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploying custom backdoors that employ Discord and Microsoft Graph API for command-and-control (C2 or C&C) communications.
AI Summary
Cybersecurity researchers have identified fresh activity from China-aligned threat actor Webworm, deploying custom backdoors using Discord and Microsoft Graph API for command-and-control communications. Webworm, first documented in 2022, has been active since at least that year, targeting government agencies.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin TheftContinue reading
- Webinar: The forgotten Google Workspace access that can lead to a breachContinue reading
- Hackers build AI frameworks for widescale credential theftContinue reading
- WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming CallsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow