Connections to phishing domain teams-cloud.live and subdomains

Kush rana@Kushblueteamer

•updated 3 days ago•32•0•44

Detects network activity to the known malicious phishing domain 'teams-cloud.live' and its subdomains, which are used to host Microsoft Teams login page clones for credential harvesting.