TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Home / Tech / TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

August 18, 2026 dirk 0 Comments 3 tags

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT.

“TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services,” Ontinue said in a technical report shared with The Hacker News. “Tasking flows through SharePoint Online file

Source: The Hacker News

Explore More

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer.

Ultrasound Imaging of the Brain

Ultrasound Imaging of the Brain Source: Hacker News

Typing Speed Test, but for Developers

Typing Speed Test, but for Developers Source: Hacker News