Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud

A newly identified cyber threat called TwinLoot operates entirely from Microsoft's cloud and utilizes a Python-based malware framework. This framework employs living-off-the-land tactics to achieve a high level of stealth. The malware features a modular implant that is capable of stealing credentials and maintaining persistence.