What Happened
Unit 42 documented a voice-phishing (vishing) campaign — dubbed "Spring Ring" — that abused Microsoft Teams calling features to impersonate trusted internal contacts, socially engineer employees, deliver malware, and escalate to domain controllers, enabling broad network compromise [1]. The campaign leveraged platform-native trust signals (caller identity, in-app presence) to bypass traditional email-centric defenses…
