Bottom line: The newly discovered malware framework uses Microsoft Azure and Azure Kubernetes Service (AKS) to host its command-and-control (C2) infrastructure.
What's happening: Researchers from the Ontinue Cyber Defense Center discovered the implant while investigating an active campaign in the United States and Nigeria, using a custom-made Python script to infect over 1,000 Windows computers.
What to do: Security leaders should monitor Microsoft Azure and AKS services for suspicious activity and implement additional security controls, such as network segmentation and anomaly detection, to prevent similar attacks.