Focus Keyphrase: Vishing via Microsoft Teams
Attackers used vishing via Microsoft Teams to impersonate IT support staff, trick employees into granting remote access, and then deploy Chaos ransomware. Sophos observed fast intrusions, sometimes within 17 hours.