Offensive and defensive framework ROADtools is being misused by nation-state actors for cloud att...

Summary

ROADtools, an offensive/defensive framework for Azure and Microsoft 365 security testing, is being exploited by nation-state actors to conduct cloud attacks. Security researchers provide guidance on identifying malicious ROADtools usage patterns and recommend proactive hunting techniques to detect anomalous activity associated with the framework's misuse.

Indicators of Compromise

• malware — ROADtools

Entities