Unit 42

@unit42_intel · Twitter · 2026-09-02 17:21 UTC

Spring Ring is a social engineering operation targeting employees at 10 companies via external Microsoft Teams accounts. Attackers used voice phishing to deploy remote tools and attempt PetitPotam NTLM relay attacks against domain controllers: https://bit.ly/4zK514Q