Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Unit 42 security research covering Microsoft Teams voice phishing and identity abuse, credential attacks against Microsoft Entra tenants, malware and botnets, blockchain-based command and control, npm and SDLC supply-chain threats, AI-enabled malware and token theft, passkey implementation weaknesses, direct-to-IP C2, and macOS developer-targeting malware. The collection highlights active enterprise credential theft, malware propagation, DDoS, secrets exposure, and emerging AI- and blockchain-enabled attack techniques.