Field Analysis
Phone-Plus-Teams to Token Persistence: Storm-1811's External-Chat Phishing Chain
Storm-1811 chained voice phishing, Microsoft Teams external chats, and Quick Assist into a remote-control persistence path that ended in Black Basta deployments. Here is the chain step by step.
Read more:Microsoft Threat IntelligenceRapid7