Microsoft Teams Exploited by Scammers in High-Profile Enterprise Phishing Surge

A security advisory released by threat intelligence researchers reveals that threat actors are systematically exploiting default external tenant federation settings in Microsoft Teams. Attackers impersonate corporate IT support personnel or executive leadership to deliver malicious payload links and execute authorization fraud.

Enterprise IT departments are urged to audit external communication policies, restrict guest tenant messaging rights, and enforce multi-factor authentication (MFA) step-up challenges for any financial transaction authorization requested over internal chat platforms.