Fake IT Support on Microsoft Teams Leads to AD CS Abuse and Data Theft
RedSide Security November 02, 2026 Cybersecurity 14 views
Attackers impersonated IT support on Microsoft Teams to gain remote control of employee PCs, then abused insecure AD CS settings to obtain privileged certificates — including one for a domain controller — in intrusions investigated by Microsoft.
privilege escalation
social engineering
data theft
identity security
Microsoft Teams
AD CS
helpdesk impersonation
Continue reading: Fake IT Support on Microsoft Teams Leads to AD CS …
