May 212026 Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API Webworm added EchoCreep and GraphWorm in 2025, using Discord and Microsoft Graph API C2 to expand stealth operations.