Microsoft details help desk impersonation on Teams that led to AD CS abuse via ESC1 and ESC8, giving attackers privileged certificates. Related Posts: Kaspersky Uncovers CyberStrikeAI Framework Attacks on Schools Supermarket Freezer Hack Hits Stores Across Europe North Korean Threat Actors Accelerate Cyber Operations With Artificial Intelligence The post Help Desk Impersonation on Teams Leads to AD CS Abuse and Domain Takeover Attempts appeared first on Daily CyberSecurity.

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations