Cybercriminals are targeting Microsoft Teams users with novel attack methods, posing as IT support to exploit trust and gain persistent access to corporate networks. Identified by ReliaQuest, this complex campaign involves a fresh malware persistence method called TypeLib hijacking. Attackers primarily target executive employees, likely when slightly less alert, during 2-3 pm local time. These techniques have been linked to threat group Storm-1811 and those associated with Black Basta ransomware.

First Quarter Has Record-Breaking Number of Ransomware Attacks
March saw a record 107 ransomware attacks, marking an 81% increase from last year, according to cybersecurity firm Blackfog. The majority of these attacks targeted