{"id":11395,"date":"2026-03-17T10:03:48","date_gmt":"2026-03-17T10:03:48","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/03\/17\/attackers-hijacking-legitimate-websites-to-attack-microsoft-teams-users\/"},"modified":"2026-03-17T10:03:48","modified_gmt":"2026-03-17T10:03:48","slug":"attackers-hijacking-legitimate-websites-to-attack-microsoft-teams-users","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/03\/17\/attackers-hijacking-legitimate-websites-to-attack-microsoft-teams-users\/","title":{"rendered":"Attackers Hijacking Legitimate Websites to Attack Microsoft Teams users"},"content":{"rendered":"

Attackers Hijacking Legitimate Websites to Attack Microsoft Teams users
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

A multi-vector phishing campaign using compromised WordPress sites to steal login credentials from Microsoft Teams<\/a> and Xfinity users. By hijacking these trusted sites, attackers can bypass security filters and trick victims into disclosing sensitive information.<\/p>\n

The threat actors are not relying on a single method to trick their victims. Instead, they are utilizing three distinct phishing lures<\/a> designed to create a false sense of urgency:<\/p>\n

\"
Fake Missed Voicemail Alert (Source: X post by KnowBe4 Threat Labs)<\/figcaption><\/figure>\n