Russian APT phished government employees via Microsoft Teams

An APT group linked to Russia’s Foreign Intelligence Service has hit employees of several dozen global organizations with phishing attacks via Microsoft Teams, says Microsoft. A social engineering attack to bypass MFA protection “To facilitate their attack, the actor uses Microsoft 365 tenants owned by small businesses they have compromised in previous attacks to host and launch their social engineering attack. The actor renames the compromised tenant, adds a new onmicrosoft.com subdomain, then adds a … More →

The post …

actor apt attack attacks businesses bypass compromised don't miss employees engineering global government government-backed attacks hot stuff intelligence intelligence service mfa microsoft microsoft 365 microsoft teams organizations phished phishing phishing attacks protection russia russian service small businesses social social engineering teams