CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Tuoni C2 Framework Used in Unsuccessful Real-Estate Cyber Intrusion

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

In mid-October 2025, an unknown threat actor attempted to infiltrate a major U.S.-based real-estate company using the Tuoni C2 framework. The attack involved social engineering via Microsoft Teams impersonation for initial access, followed by a multi-stage payload delivery using steganography to conceal the final payload within a bitmap image. The attack ultimately failed but highlighted the misuse of red teaming tools for malicious purposes. The Tuoni C2 framework, first released in early 2024, is advertised as an advanced tool for security professionals, with a free Community Edition available on GitHub. The attack demonstrated signs of AI assistance in code generation, evident from the scripted comments and modular structure of the initial loader.

Timeline

  1. 18.11.2025 16:00 1 articles · 23h ago

    Tuoni C2 Framework Used in Unsuccessful Real-Estate Cyber Intrusion

    In mid-October 2025, an unknown threat actor attempted to infiltrate a major U.S.-based real-estate company using the Tuoni C2 framework. The attack involved social engineering via Microsoft Teams impersonation for initial access, followed by a multi-stage payload delivery using steganography to conceal the final payload within a bitmap image. The attack ultimately failed but highlighted the misuse of red teaming tools for malicious purposes.

    Show sources
    Open in new tab

Information Snippets