Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.