[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f40uh9vKbd1MprBCMU8t2ElkZrN3dDecF5_0Ph0OIXcs":3},{"article":4,"iocs":40},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":28,"category":29,"article_tags":32},"b388cd51-af07-481d-974e-f9cdd4e6172d","China's Webworm Uses Discord, Microsoft Graphs to Hack EU Govts.","china-s-webworm-uses-discord-microsoft-graphs-to-hack-eu-govts-ba6b68","The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.","The Chinese APT group Webworm has been targeting EU governments, leveraging Discord and Microsoft Graph for command and control. The group also uses SOCKS proxies like SoftEther VPN to obscure their activity.","Webworm APT targets EU governments using Discord and Microsoft Graph for C2.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fendpoint-security\u002Fchinas-webworm-discord-microsoft-graphs","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt9bbd9e9f246990ad\u002F6a0f5eeab6882cd3afc7c328\u002FDiscord_app_iPhone_True_Images_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-05-22T07:01:00+00:00","2026-05-22T08:00:30.501951+00:00",8,[18,21,24,26],{"name":19,"type":20},"Webworm","threat_actor",{"name":22,"type":23},"Discord","product",{"name":25,"type":23},"Microsoft Graph",{"name":27,"type":23},"SoftEther VPN","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":28,"icon":11,"name":30,"slug":31},"Nation-state","nation-state",[33,35],{"category":34},{"id":28,"icon":11,"name":30,"slug":31},{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]