Russian cyberattackers spotted hitting Microsoft Teams with new phishing campaign

Storm-2372 uses legitimate device flow authentication to steal access tokens and move laterally.