Microsoft

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
Hackread

‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware

A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access ...

New malware targets Microsoft Teams users by posing as your company's IT helpdesk

Victims are being told to install a fake cleaner software which is nothing more than a backdoor framework.
Bleeping Computer

Microsoft: Teams increasingly abused in helpdesk impersonation attacks

Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate tools for access and lateral movement on enterprise networks. The hackers ...
Bleeping Computer

Ransomware gang abuses Microsoft Teams relays to hide malicious traffic

DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure. The backdoor abuses the Traversal Using Relays ...
Redmond

Microsoft Optimizes Teams Remote App Experience for Windows 365 and Azure Virtual Desktop

Microsoft enhances Teams optimization for Windows 365 and Azure Virtual Desktop Remote App environments. New media engine improves audio, video, security and collaboration performance for cloud-hosted ...