Hackers Use Microsoft Teams to Steal Credentials and Manipulate MFA
Iranian APT group MuddyWater deployed Chaos ransomware as a “false flag” in a sophisticated hybrid espionage campaign targeting Western organizations, bypassing encryption in favor of data theft and long-term persistence. In early 2026, Rapid7 incident responders were called into what initially appeared to be a routine Chaos ransomware intrusion, but forensic analysis quickly revealed something […] The post Hackers Use Microsoft Teams to Steal Credentials and Manipulate MFA appeared first on Cyber Security News.
MuddyWater, an Iranian APT group, used Microsoft Teams as a delivery mechanism for Chaos ransomware in a hybrid espionage campaign targeting Western organizations. The attackers bypassed encryption to steal credentials and achieve long-term persistence.
Read the full article
This is a curated summary. The complete article is available at Cyber Security News.