The KongTuke initial access broker group is exploiting Microsoft Teams for social engineering attacks, breaching corporate networks in as little as five minutes.
KongTuke, known for facilitating enterprise breaches, has shifted tactics to leverage Microsoft Teams as an attack vector. The group uses the platform to conduct social engineering campaigns targeting corporate employees.
Once inside a network, attackers establish persistent access rapidly—sometimes within minutes. This speed makes detection difficult before damage occurs.
Microsoft Teams' widespread adoption in enterprise environments makes it an attractive target. The platform's legitimacy within organizations allows attackers to blend in with normal business communications.
Security researchers tracking the group recommend organizations implement strict access controls, monitor Teams activity for suspicious behavior, and enforce multi-factor authentication across all accounts. Employee security awareness training focusing on social engineering tactics is also critical.
The shift highlights how threat actors continuously adapt to exploit tools already present in target environments, using familiarity and trust as weapons.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.