Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
· thehackernews.com · popularity 20/100 · 0 similar stories today · Mental Health & Psychology (Health & Life Sciences)
Read the original at thehackernews.com →
Summary
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller. Microsoft said in a report that it investigated two such intrusions, one of which resulted in company
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 4.