Microsoft Teams Attack Skips the Phish to Deliver Malware Directly

Summary

Exploiting a flaw in how the app handles communication with external tenants gives threat actors an easy way to send malicious files from a trusted source to an organization’s employees, but no patch is imminent.