ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Microsoft has identified a sophisticated intrusion campaign using Microsoft Teams to impersonate IT staff and gain remote access via RMM tools, deploying malware for persistent control and enterprise reconnaissance. A related operation, Spring Ring, used Teams for large-scale voice phishing to coerce victims into installing malware, targeting over 150 employees across multiple companies.