Attackers Abuse Enterprise Collaboration Tools to Avoid Detection

Unit 42 researchers report a fourfold increase over 12 months in malicious activity abusing enterprise collaboration platforms, primarily via targeted chat-phishing that leads to compromised accounts and stealthy misuse of trusted communication channels; attackers use these platforms for identity phishing, credential theft, impersonation, malware delivery and social engineering, and defenders are advised to treat collaboration messages with the same scrutiny as email and expand security awareness and phishing simulations to cover these scenarios.