#antino

The backdoor never calls home: it checks an Outlook mailbox every ten seconds and leaves what it steals in OneDrive

Cisco Talos has published a China-nexus campaign that put a Rust backdoor on roughly 350 machines across eight Asian countries. Antino's command channel is Microsoft Graph — commands arrive as mail, stolen files go to OneDrive. Every packet it sends goes to a host the victim's own allow-list already trusts.