Tag: microsoft-teams

Tracing a Teams Phishing Link from Message to Blob URL to Fake Login Form

pr0h0•September 11, 2026

A step-by-step technical breakdown of how attackers use Microsoft Teams messages to deliver phishing links that leverage browser Blob URLs to render convincing fake login forms directly on the victim's device.

phishingmicrosoft-teamsblob-url

SNOW Malware’s WebSocket C2 Tunnels: How Browser Extensions Turn Into Covert Channels

pr0h0•July 9, 2026

This post examines the SNOW malware ecosystem’s use of Microsoft Teams phishing, WebSocket-based command-and-control tunnels, and malicious browser extensions to create covert channels for stealthy intrusion and persistence.

cybersecuritymalwarewebsocket