Microsoft reveals the attack phishing, against the Teams

Researchers and Microsoft have found an onslaught of new phishing carried out by the Storm-2372, against the users of the service Teams. Cyber criminals cyber russians used a technique of the weird, to catch the signs of a certificate and to take control of the account.

The Device code, phishing
The techniques used by a group of Storm-2372-called “phishing is the code for the device”. Applications can be installed on devices without a console or a maus, as well as televizorët intelligent, or Fire TV Sticks, the display on the screen of a source and a certificate, which will have to be put in the application on the smartphone or computer. A similar procedure has been used by cyber criminals cyber russians.

During the attack, should be a code to determine that a single doubt not and put on the face of the illegal entry. In this way, cyber criminals cyber receive the arguments to determine which allow them to be aksesojnë the account and the user data. They are also able to gain access to other services, such as e-mail, and save it in the cloud for as long as the token remains valid.

Cyber criminals cyber get in touch with the victims via WhatsApp, Signal, and the application of other messages claiming that they are someone that they know. In a moment you are asked to join a meeting in Teams, using the code, an invitation to send me a message or e-mail. It's code in the location that it allows you to capture the signs of when to get in control of your account by Microsoft.

Recently, a user ID for the client that is used for the Microsoft Authentication Broker that allows you to search for a token of a new, as of the end of the previous one. It provides stability and allows cyber criminals cyber connect their devices with the service, Entra user ID (once the Azure Active Directory).

Microsoft has provided a number of recommendations in order to limit the risks, as well as a p.moreover, it has. the use of authentication by a variety of factors, through the service of the passage, or to the code of the physical.