Social Engineering Campaign Targets Microsoft Teams Users

Researchers at CyberProof observed threat actors abusing Microsoft Teams' new "Chat with Anyone" feature to send direct messages impersonating IT support. Victims were coerced into joining Windows Quick Assist sessions and visiting a phishing URL where they entered Microsoft credentials, enabling attackers to install an info-stealer. The researchers warn that the upcoming full rollout of the feature may increase exposure and lead to more phishing-driven malware campaigns.