UNIT 42
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams
HIGH Microsoft Teams voice phishing social engineering IT impersonation
Strategic summary
Organized social engineering campaign uses external Microsoft Teams accounts to impersonate IT help desk personnel for credential theft; 150+ employees across 10+ companies targeted between January and April 2026.
Relevance for you
Organized social engineering campaign uses external Microsoft Teams accounts to impersonate IT help desk personnel for credential theft; 150+ employees across 10+ companies targeted between January and April 2026.
Risk score
20
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.10
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 8.00
- vendor mismatch penalty
- 0.00
Path: operational