Cyberattack on US Real Estate Firm Utilizes Tuoni C2 Framework

Cyberattack on US Real Estate Firm Utilizes Tuoni C2 Framework

First seen 19 Nov 2025, 18:15 UTC Infosecurity-MagazineScworld 26.3

Article Content

Browse articles
ThreatCluster

In October 2025, a cyberattack targeting a major U.S. real estate firm was attempted using the Tuoni command-and-control framework. The attack involved social engineering tactics, where threat actors impersonated Microsoft Teams contacts to lure an employee into executing a malicious PowerShell script. The operation showcased the integration of AI-assisted methods in delivering the attack.