KongTuke hackers now use Microsoft Teams for corporate breaches
Source: BleepingComputer · Category: Threat Actor & Campaign
KongTuke initial access broker now uses Microsoft Teams for social engineering attacks, gaining persistent network access in ~5 minutes. Law firms rely heavily on Teams for collaboration; this represents direct attack vector against firm networks. Conduct immediate Teams security audit (MFA enforcement, suspicious account activity, external sharing settings).