Attackers Abuse Microsoft Teams and AD CS for Corporate Breaches

Threat actors posed as IT support via Microsoft Teams to gain remote access to user workstations. They subsequently leveraged misconfigured Active Directory Certificate Services settings to acquire authentication certificates for privileged accounts, including a domain controller.