Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posed as IT support on Teams in two intrusions, abusing AD CS to gain privileged access and copying company data in one case.
More info