- Experts say Microsoft Teams and Zoom are perfect for hiding Ghost Calls
- Attackers can obtain temporary TURN credentials and create a tunnel
- Vendors must implement safeguards, because there are no vulnerabilities in sight
Researchers from Praetorian have shed the light on Ghost Calls, a post-exploitation command-and-control evasion technique which send attacker traffic through legitimate Traversal Using Relays around NAT (TURN) servers used by the likes of Zoom and Microsoft Teams, to evade detection.
