Cato Details Teams Vishing Delivery of PhantomBackdoor
Cato CTRL researchers describe a Teams helpdesk-impersonation incident in which guided screen sharing led to staged PowerShell, host-data collection, and a WebSocket backdoor. They recommend tighter Teams controls and PowerShell monitoring.
