PHISHERS USE MICROSOFT TEAMS GUEST FOR SCAMS.

The article focuses on a phishing campaign that exploits Microsoft Teams functionality to deliver social engineering content disguised as legitimate communications. Attackers create Teams instances with finance-themed names to lure recipients into believing they are receiving urgent billing notifications, using the "Invite a Guest" feature to send seemingly authentic invitations. The campaign's unique approach encourages victims to call a fraudulent phone number rather than clicking on malicious links, making it harder for traditional email security measures to detect the threat. Researchers noted that the campaign affected over 6,000 customers, primarily in industries with high Teams usage, and emphasized the need for organizations to implement stricter guest invitation policies and enhance content-based detection methods to mitigate such risks. [Extracted from the article]