TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #32052 19
#ParsedReport #CompletenessHigh
31-08-2026

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

https://unit42.paloaltonetworks.com/spring-ring-voice-phishing-campaigns/

Report completeness: High

Actors/Campaigns:
Spring_ring
Apt29

Threats:
Credential_harvesting_technique
Petitpotam_vuln
Microsoft_quick_assist_tool
Bloat_technique
Spear-phishing_technique

Victims:
Employees, Organizations across various industries

Industry:
Education

TTPs:
Tactics: 4
Technics: 5

IOCs:
Email: 17
Domain: 1
File: 1
IP: 16
Hash: 1
Url: 1

Soft:
Microsoft Teams, Microsoft Edge

Algorithms:
sha256

Functions:
Voice, Protocol

Languages:
python, powershell

Links:
https://github.com/topotam/PetitPotam
Unit 42 Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain controllers.
More from @aptreports
  1. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 12, 2026#ParsedReport #CompletenessLow 09-10-2026 It Always Comes Back to DNS: Iranian VPN-over-DN…
  4. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 12, 2026#ParsedReport #CompletenessMedium 11-10-2026 GhostAction Phishing Campaign https://opensou…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →