Azure Service Command and Control HTTP traffic forwarding part 4

Heres the final (for now at least) entry in my series on abusing Azure services to provide high reputation redirectors for Command and Control. This time around, we are looking at Azure’s API Management (APIM) Service . This service actually gives us a number of different configurations we can use to stick a trusted HTTP frontend in front of other Azure components, however in the example below I…