Cactus

Ransomware groups abuse Microsoft Teams external access for rapid remote compromise

1. Executive summary Arctic Wolf has documented more than 400 incidents in which actors used Microsoft Teams external access (federation) to pose as internal IT help