Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Source: The Hacker News
At a glance
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller. Microsoft said in a report that it investigated two such intrusions, one of which resulted in company