Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic

**TL;DR:** Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic

---

Cybercrims deploying DragonForce ransomware appear to have gained access to a major US services company's network, then spent two months up to no good while disguising their command-and-control activities as legitimate Microsoft Teams traffic. Turn," to maintain communication with the compromised systems. Rather than reaching out to attacker-controlled infrastructure that might raise alarms, the backdoor hid its activity inside traffic associated with Microsoft's widely used collaboration platform. To anyone monitoring network traffic, the compromised systems appeared to communicate only with legitimate Microsoft servers.

"The attackers in this campaign use exceptionally sophisticated cyber tradecraft," Symantec said. Turn on systems after deploying Drag

Source: The Register

Tech news is rarely just a gadget headline. We frame what changed, who benefits, and what to watch next as details firm up.

The immediate headline is only the entry point. The more useful question is who gains leverage, who faces new risk, and whether the change is durable or experimental.

Track whether the story affects total cost of ownership: subscriptions, compatibility, downtime risk, or support burden.

1) If money or security is involved, wait for primary sources. 2) Test changes on a small scale before committing. 3) Note what would falsify your current assumptions.

**Q: Is everything in this article confirmed?** A: The summary reflects publicly reported information at publication time. Analysis sections are clearly framed as context, not new reporting.

**Q: Will iByte update this page?** A: Yes. As primary sources publish more detail, this article can be refreshed without changing the URL.

Last updated: June 16, 2026.

Additional context: early-cycle stories often look bigger in headlines than in day-to-day impact. The useful move is to identify the smallest set of facts that would change your decision, then wait for those facts to land.

Additional context: early-cycle stories often look bigger in headlines than in day-to-day impact. The useful move is to identify the smallest set of facts that would change your decision, then wait for those facts to land.