From an MS Teams Call to a Domain Admin: Analyzing an Impersonating IT Support Campaign

Overview Imagine a normal work morning: employees receive a direct message on Microsoft Teams from an account called "IT Helpdesk", informing them that their computer is transmitting malicious traffic