GraphWorm Malware Uses OneDrive for C2

A China-aligned threat group known as Webworm has deployed a sophisticated new backdoor called GraphWorm that routes all command-and-control traffic through Microsoft OneDrive, effectively hiding mal…