#Microsoft Teams
All CosmicBytez Labs articles tagged #Microsoft Teams, across news, security advisories, how-to guides, and projects.
- News
External Teams Chats Anchor 15-Minute Malware Delivery
A wide-scale social engineering campaign, possibly tied to Black Basta, pairs email bombing with external Microsoft Teams chats for repeatable initial access.
- Newsletter
Oct 27 Digest: PHP2Shell Hits CISA KEV, Teams Help-Desk Scams, Hijacked Convertr Script Skims Cards
This week: CISA confirms PHP2Shell exploitation, Teams IT-support scams drive ransomware, a hijacked Convertr script skims cards, and Popcorn Time's dead...
- News
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Arctic Wolf sees a repeating pattern across hundreds of cases: mail flooding, a fake IT help desk on Teams, then an RMM tool install and ransomware.
- News
Microsoft Teams to Get AI-Powered, Context-Aware Phishing Detection
Starting early November 2026, Teams will use AI to flag phishing and social engineering in chats, including messages with no links or files.
- News
WordlistLoader and SynkLoader: Two New Windows Malware Loaders Analysed
Security researchers expose WordlistLoader deploying Amatera stealer via ClickFix and SynkLoader delivering a 7-module RAT through Microsoft Teams phishing.
- News
New SynkLoader Malware Pushed in Microsoft Teams Phishing Campaign
SynkLoader is a new modular loader spread via Teams vishing that steals credentials, tunnels network traffic, and gives attackers persistent remote access.
- News
Microsoft Teams Vishing Attacks Lead to Chaos Ransomware Deployment
Threat actors are impersonating IT support staff in Microsoft Teams voice calls to gain remote access to corporate devices and deploy Chaos ransomware...
- Newsletter
June 17 Digest: Teams C2 Evasion, Copilot Data Theft, iRhythm Breach, cPanel KEV
DragonForce hides C2 inside Microsoft Teams relay traffic; a SearchLeak attack weaponizes M365 Copilot for one-click data exfiltration; iRhythm confirms...
- News
KongTuke Hackers Now Use Microsoft Teams for Corporate
Initial access broker KongTuke has pivoted to Microsoft Teams for social engineering attacks, gaining persistent access to corporate networks in as little...
- News
Threat Actor Uses Microsoft Teams to Deploy New 'Snow'
UNC6692 employs email bombing and Teams impersonation to deliver a three-component Snow malware suite — SnowBelt, SnowGlaze, and SnowBasin — enabling full...
- News
Microsoft Teams Right-Click Paste Broken by Edge Update Bug
Microsoft has acknowledged that a recent Microsoft Edge browser update introduced a regression that breaks right-click paste functionality in the...