Spring Ring

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

1. Executive summary Unit 42 has disclosed "Spring Ring," a coordinated social-engineering operation active January–April 2026 that used external Microsoft Teams accounts