Teams and Quick Assist abused

Attackers have been hijacking legitimate websites and weaponizing Microsoft Teams and Quick Assist to drop stealthy backdoors such as A0Backdoor. The campaign shows collaboration tools themselves can be attack vectors—so incidents now often begin inside trusted apps rather than email reported and reported.