"Malware Delivery Made Easy: Exploiting Microsoft Teams Bug"

A tool called TeamsPhisher has been developed by a member of the U.S. Navy's red team to exploit an unresolved security issue in Microsoft Teams, allowing attackers to bypass file-sending restrictions and deliver malware from external accounts. The tool automates the attack process and requires users to have a Microsoft Business account. The issue has not been fixed by Microsoft, and organizations are advised to disable communications with external tenants or create an allow-list with trusted domains to mitigate the risk.