The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.
Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
Summary + source link. No paywalls, no tracking.