Outlook Mailboxes Abused to Conceal Linux GoGra Backdoor Traffic

Executive Summary: Researchers attributed a cross-platform Harvester APT campaign to a new Linux GoGra backdoor that authenticates to Outlook mailboxes via hardcoded Azure AD credentials to receive encrypted commands and exfiltrate results; the implant uses social-engineered documents and a Go dropper with systemd persistence, shares keys and code with a Windows variant, and targets organizations in South Asia.