Teams help desk impersonation leads to AD CS ESC1 and ESC8 certificate abuse in two intrusions
THREAT ACTORActive Directory Certificate Servicesredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers pretended to be IT support in Microsoft Teams and persuaded staff to give them remote access to their computers. They then abused weak settings in the company's certificate system to get hold of powerful accounts. Microsoft says no Teams flaw was exploited and the activity is not linked to a named group.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- No action needed: this one is for your information.
General advice for this kind of story
Full story timeline · 1 update
Who reported · 1 outlet
Microsoft Security Blog
Who and what is in it
Companies