GoKawiilArctic Wolf details 400+ attacks abusing Microsoft Teams external chats
Arctic Wolf has documented a social-engineering campaign affecting more than 400 incidents in which attackers flood employees' inboxes with mail-bomb spam, then contact them via Microsoft Teams' external chat feature posing as IT support. Victims are talked into granting remote access through tools like Quick Assist or AnyDesk, after which attackers move from recon to credential theft, lateral movement and payload execution in under 15 minutes.