JEDI-SEC | Security Research & Digital Defense

Tag: Microsoft Teams

  • How attackers turned a Teams meeting booking into a device code phishing trap

    Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token before Huntress’s security operations center identified the incident. Device code phishing abuses a real Microsoft sign-in flow. The attacker starts a sign-in, gets a short code back, and persuades the victim to type it into Microsoft’s genuine device login page. The victim enters the code, completes MFA … More →

    Source: Help Net Security · 2026-11-13

  • Fake IT help desk callers got by on little more than names and email addresses

    Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware. They knew names and email addresses “The attackers appeared to know employee names and email addresses, as they contacted users directly by email and Teams and used identities … More →

    Source: Help Net Security · 2026-10-30