Tag

#Microsoft Teams

2 articles covering Microsoft Teams across campaign analysis, detection engineering, and defender tradecraft.

Coverage

2 entries

Field Analysis

Dual UseTradecraft LabsMay 20, 20269 min read

MuddyWater's Teams Playbook: Screen-Share Credential Theft Behind a False Flag

An Iranian actor opened an intrusion with a Microsoft Teams chat request and a screen-sharing session, harvested credentials live, then staged ransomware as cover for a state-backed operation.

Phone-Plus-Teams to Token Persistence: Storm-1811's External-Chat Phishing Chain

Storm-1811 chained voice phishing, Microsoft Teams external chats, and Quick Assist into a remote-control persistence path that ended in Black Basta deployments. Here is the chain step by step.

By PhishPond Desk

#Storm-1811
#Vishing
#Microsoft Teams

#Microsoft Teams

Coverage

Browse Other Tags