Attackers posed as IT support on Teams in two intrusions, abusing AD CS to gain privileged access and copying company data in ...