Hackers Abuse Trusted Websites in New Attacks on Microsoft Teams Users

Attackers are conducting a phishing campaign that hijacks legitimate WordPress sites to host pixel-perfect replicas of Microsoft Teams, Xfinity, and UAE Pass login portals. Victims are lured via three social-engineering hooks (fake Teams voicemail, shared document alerts, and UAE Pass spoofing) and redirected through an intermediary domain (skimresources.com) to payloads hidden in backend directories like /wp-includes/ and /bin/; the report includes active IOCs for blocking and monitoring.