As cited
Copy frozen at (site build).
threat intel
You've Got Malware: FINALDRAFT Hides in Your Drafts
Elastic Security Labs identified a new malware variant called FINALDRAFT targeting a foreign ministry during a recent investigation. The malware combines a custom loader and backdoor with capabilities to leverage Microsoft's Graph application programming interface (API) for command and control communications.
Why it matters: Foreign ministries and diplomatic organizations need to audit draft documents and email for execution vectors; security teams should monitor for Graph API abuse in legitimate-looking application authentication flows.
- Source published
- First seen by Cybersecurity Tracker