The Harvester espionage group has extended its GoGra backdoor to Linux systems, targeting telecommunications, government, and IT organizations in South Asia. The malware hides command-and-control traffic inside Microsoft Outlook inboxes via the Microsoft Graph API, making it indistinguishable from legitimate cloud traffic to most security controls. Organizations running Linux infrastructure that rely on Microsoft 365 services face elevated risk of undetected long-term access and data exfiltration.