Token-Mining Weakness in Microsoft Teams Makes for Perfect Phish

Web: https://www.darkreading.com/vulnerabilities-threats/token-mining-weakness-microsoft-teams-perfect-phish

Access tokens for other Teams users can be recovered, allowing attackers to move from a single compromise to the ability to impersonate critical employees, but Microsoft isn't planning to patch.

microsoft microsoft teams mining perfect phish teams token weakness