A specialized Beacon Object File (BOF) has been designed to extract authentication cookies from Microsoft Teams without disrupting the application’s functionality. This development builds on recent findings that reveal how Teams stores sensitive access tokens, potentially allowing attackers to impersonate users and gain access to conversations, emails, and documents. The tool, released by Tier Zero Security, adapts an existing browsing technique to exploit weaknesses in Teams’ cookie encryption.
See also: Microsoft Teams introduces multitasking mode
Microsoft Teams, as one of the most popular collaboration platforms, is widely used by businesses and organizations to communicate and share information. However, the security of the data it manages is crucial, as the sensitive information exchanged can be a target for malicious attacks.
The new BOF tool exploits weaknesses in Teams cookie encryption, allowing attackers to gain access to authentication tokens without being detected. These tokens can be used to access user accounts, allowing them to read conversations, send messages, and access other sensitive data.
See also: Fake Microsoft Teams installers distribute Oyster backdoor
Tier Zero Security, the company that developed the tool, has pointed out that this exploit does not require physical access to the victim's device, making it particularly dangerous. Attackers can exploit the weakness remotely, leaving users vulnerable to phishing attacks and other forms of social engineering.
Microsoft is aware of the vulnerability and is working to develop fixes to strengthen the security of cookies in Teams. Users are encouraged to regularly update their applications and implement security practices, such as using strong passwords and enabling multi-factor authentication.
See also: Microsoft avoids EU fine for Teams bundling
This development highlights the importance of continuously monitoring and upgrading security systems, as well as educating users to recognize and avoid potential threats. Cybersecurity is an ongoing challenge and requires the cooperation of all parties involved to protect data and systems.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
