Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Chat Messages - T1552.008 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID b843af00-6e1d-462f-a451-c2aad87a3442
Fingerprint 2d1198b20c330bd5
Analysis status DONE
Considered CTI value 0
Text language
Published April 27, 2020, midnight
Added to db Feb. 18, 2023, midnight
Last updated Nov. 18, 2024, 7:16 p.m.
Headline Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Title Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Detected Hints/Tags/Attributes 61/2/15
Source URLs
Redirection Url
Details Source https://www.cyberark.com/resources/threat-research-blog/beware-of-the-gif-account-takeover-vulnerability-in-microsoft-teams
Details Source https://www.cyberark.com/threat-research-blog/beware-of-the-gif-account-takeover-vulnerability-in-microsoft-teams/
URL Provider
Details Provider Source level domain
Details cyberark.com www.cyberark.com
Attributes
Details Type #Events CTI Value
Details Domain 62 
login.microsoftonline.com
Details Domain 1 
media2.giphy.com
Details Domain 9 
teams.microsoft.com
Details Domain 4 
api.spaces.skype.com
Details Domain 2 
amer.ng.msg.teams.microsoft.com
Details File 1 
10101010_10101010_10101010_o.jpg
Details File 1 
giphyctrl.pl
Details File 3 
giphy.gif
Details File 3 
ng.msg
Details md5 1 
9e2a890f5f05001e01c16d9731983d3e
Details Url 1 
https://scontent.fsdv2-1.fna.fbcdn.net/v/t1.0-9/r270/10101010_10101010_10101010_o.jpg?_nc_cat=102&_nc_sid=111111&_nc_ohc=abc&_nc_ht=scontent.fsdv2-1.fna
Details Url 1 
https://media2.giphy.com/media/gb4kwtd3ussjq/giphy.gif
Details Url 1 
https://amer.ng.msg.teams.microsoft.com/v1/users/me/conversations/19:...@unq.gbl.spaces/messages?view=msnp24equivalent
Details Url 7 
https://teams.microsoft.com
Details Url 2 
https://teams.microsoft.com/_