TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Home / Tech / TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

August 18, 2026 dirk 0 Comments 3 tags

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT.

“TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services,” Ontinue said in a technical report shared with The Hacker News. “Tasking flows through SharePoint Online file

Source: The Hacker News

Explore More

Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means

Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories It’s dumb out there again. This week has the usual smell of prod on fire

OpenAI and Anthropic unite against open-weight AI risks to their bottom line

OpenAI and Anthropic unite against open-weight AI risks to their bottom line Source: Hacker News