Shulou(Shulou.com)11/24 Report--

CTOnews.com July 6-Microsoft Teams has been exposed to vulnerabilities that allow attackers to bypass file sending restrictions and distribute malware to users.

Combined with the previously exposed Microsoft Teams app vulnerability, the U.S. Navy security team used Python to write TeamsPhisher tools that automatically distribute malware on their own.

The vulnerability is based on the fact that Teams relies on client-side protection, and attackers can spoof the protection system by changing the ID in POST requests.

The tool works by getting attachments, messages, and target Teams user lists. It then uploads the attachment to the sender's SharePoint and sends a message with a SharePoint attachment link to each destination.

CTOnews.com attaches a link to a more detailed report on TeamsPhisher, which interested users can click to read.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.