Google reported that the Chinese state-sponsored threat actor APT41 utilized a malware named TOUGHPROGRESS, which exploits Google Calendar for command-and-control purposes. This activity was discovered in late October 2024 and involved the malware being hosted on a compromised government website, targeting various government entities. The incident highlights the misuse of cloud services in cyber threats.
