Microsoft Teams IT support impersonation lets attackers plant a Node.js implant and pivot to domain controllers over WinRM. See how to defend. Related Posts: Outsider Phishing Kit Survives Operation Ghost Hook Takedown Phantom Deal Scam Targets Executives With Fake NDAs Chinese Actor Gambling Goblin Hijacks Brazilian Gov Sites The post Microsoft Teams IT Support Impersonation Leads to Domain Takeover appeared first on Daily CyberSecurity.

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations