Impersonating IT support: how threat actors turn a remote session… — Cyber Threat Intelligence — TG.ME

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. Learn how attackers move from social engineering…