DarkGate malware delivered via Microsoft Teams - detection and response

Executive summary

While most end users are well-acquainted with the dangers of traditional phishing attacks, such as those delivered via email or other media, a large proportion are likely unaware that Microsoft Teams chats could be a phishing vector. Most Teams activity is intra-organizational, but Microsoft enables External Access by default, which allows members of one organization to add users outside the organization to their Teams chats. Perhaps predictably, this feature has provided malicious actors a new avenue by which …

access and response attacks chats darkgate darkgate malware detection detection and response email end executive external large malware media microsoft microsoft teams phishing phishing attacks response teams