
The primary subject of the analysis is how threat actors have transitioned from traditional command-and-control servers to leveraging legitimate cloud services to facilitate stealthy, bidirectional communication. This strategic shift ensures that malicious traffic remains indistinguishable from the standard operations of a modern business environment. By turning the internal productivity tools of an organization against its own users, this malware facilitates










