Hackers impersonate IT help desk on Microsoft Teams to gain domain admin via AD CS attacks
THREAT ACTORActive Directory Certificate Servicesredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers posed as IT support staff on Microsoft Teams to get remote access to company computers. They then abused a Windows certificate system to gain control over the whole network. Microsoft reported two such intrusions, and no flaw in Teams itself was used.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Read Microsoft's full disclosure for detection and mitigation guidance, as the excerpt is truncated.
- Verify the identity of anyone claiming to be help desk staff before approving remote access sessions.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies