Attackers hide command and control in trusted cloud services
Cited cases include Gridtide on Google Sheets, SesameOp via OpenAI APIs, and a reported Intune wipe at Stryker.
34
- Mentions · 7d0
- Mentions · 30d1
- All mentions1
- First seenOct 21, 2026
- Last mentioned9d ago
Timeline
1 articles · newest firstAppears with
- Mandiantorganization · 1
- SesameOpmalware · 1
- Google Sheetsproduct · 1
- Handalathreat actor · 1
- Gentlementhreat actor · 1
- Veradigmvictim · 1
- Gridtidemalware · 1
- Microsoftvendor · 1
- Strykervictim · 1
- Microsoft Graph APIproduct · 1
- Microsoft Intuneproduct · 1
- OpenAIvendor · 1
- Googlevendor · 1
- VEILDrivemalware · 1
- OpenAI Assistants APIproduct · 1
- Havoc Frameworkmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.