Intrusions commenced with the delivery of malicious emails and subsequent contacting of targets in Microsoft Teams under the guise of corporate IT help desk staff claiming to help with the email spam issue, an analysis from ReliaQuest researchers revealed. Attackers, whose display names had the “Help Desk”
Source: SC Magazine