Microsoft Finds “SesameOp” Backdoor Using OpenAI API

Microsoft has revealed a new backdoor called SesameOp that exploits the OpenAI Assistants API for command-and-control (C2) communications. This innovative approach allows the threat actor to covertly communicate and manage malicious activities within compromised systems, deviating from traditional C2 methods. The use of OpenAI’s API enhances the stealthiness of the operation, making detection more challenging. This development highlights the evolving tactics in cybersecurity threats.

Want More Context? 🔎