DragonForce hid for months by routing malware traffic through Microsoft Teams infrastructure, masking C2 activity.