Attackers hide command and control in trusted cloud services
Cited cases include Gridtide on Google Sheets, SesameOp via OpenAI APIs, and a reported Intune wipe at Stryker.
34
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenSep 17, 2026
- Last mentioned10d ago
Timeline
3 articles · newest firstHacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
ShinyHunters says it stole FBI agent and applicant data via PeopleSoft and a government cloud.
91
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Group-IB attributes the Iran-linked hacktivist persona Handala (Void Manticore/MOIS) to the Telegram-based HEAVYGRAM backdoor and CRUDEEXCLUDE staging utility.
58
Appears with
- HEAVYGRAMproduct · 1
- Void Manticorethreat actor · 1
- FBIvictim · 1
- SesameOpmalware · 1
- UNC2814threat actor · 1
- TechCrunchorganization · 1
- Amazon Web Servicesproduct · 1
- Group-IBvendor · 1
- Google Sheetsproduct · 1
- ShinyHuntersthreat actor · 1
- Microsoft Defenderproduct · 1
- 404 Mediaorganization · 1
- FBIorganization · 1
- Oraclevendor · 1
- Gridtidemalware · 1
- Mandiantorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.