Talan.tech
LOWData BreachACTIVE

The Hacker News: Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API

April 22, 2026

Incident Summary

A breach activity involving use of the Microsoft Graph API has been reported, in which a threat actor known as Harvester deployed a Linux backdoor. The reported targets are entities in South Asia. The incident matters because it indicates malicious use of Microsoft’s API ecosystem to support intrusion activity. Limited public details are available on which organizations were affected, whether Nuance DAX was directly impacted, and the current remediation or containment status.

Incident Details

Type
Data Breach
Severity
LOW
Status
ACTIVE
Date Occurred
April 22, 2026
Tags
#hackernews#security#breach