Cybersecurity · 44 views
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
Webworm added EchoCreep and GraphWorm in 2025, using Discord and Microsoft Graph API C2 to expand stealth operations.
AI Summary
Cybersecurity researchers have identified fresh activity from China-aligned threat actor Webworm, deploying custom backdoors using Discord and Microsoft Graph API for command-and-control communications. Webworm, first documented in 2022, has been active since at least that year, targeting government agencies.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016Continue reading
- State Bank of India Suffers a Customer PII Data LeakContinue reading
- PHP2Shell exposes the weakness in coordinated vulnerability disclosureContinue reading
- Railway warns devs to rotate secrets after potential breachContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow