Russian Hackers Exploit Microsoft Teams for Government Agency Breaches

Russian state-sponsored hacking group APT29, also known as Cozy Bear, used a social engineering campaign on Microsoft Teams to compromise dozens of global organizations, including government agencies. The hackers posed as technical support staff and sent messages to manipulate users into granting approval for multi-factor authentication prompts, allowing them to gain full access to user accounts and exfiltrate sensitive information. Microsoft has mitigated the use of the domains and is investigating the activity, which targeted fewer than 40 organizations across various sectors. This incident follows recent Chinese hacking exploiting a flaw in Microsoft's cloud email service.