New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations

A new post-exploitation C2 evasion technique, dubbed Ghost Calls, has emerged, leveraging TURN servers used by popular conferencing platforms like Zoom and Microsoft Teams to tunnel malicious traffic through trusted infrastructure.