Cyberattack on US Real Estate Firm Utilizes Tuoni C2 Framework

In October 2025, a cyberattack targeting a major U.S. real estate firm was attempted using the Tuoni command-and-control framework. The attack involved social engineering tactics, including impersonation of Microsoft Teams contacts, to execute a malicious PowerShell script. Morphisec reported that the threat actors employed advanced techniques such as steganography and AI-assisted delivery methods.