Threat Spotlight: Hijacked and Hidden: New Backdoor and Persistence Technique

**ReliaQuest discovered a targeted Microsoft Teams phishing campaign (targeting finance and professional services) that used social-engineering to gain Quick Assist remote access, installed a new PowerShell backdoor delivered via a Google Drive-hosted text file, and achieved persistence through a novel TypeLib COM hijacking technique; the report provides code snippets, C2/Telegram indicators, development/testing evidence from VirusTotal, and mitigation guidance.**