Sysadmin Security on Nostr: SynkLoader uses a Teams link to spawn a fake lock screen that runs a dropped binary; ...

SynkLoader uses a Teams link to spawn a fake lock screen that runs a dropped binary; immediately enforce Conditional Access to block external Teams content and lock down execution with AppLocker/WDAC, then apply the latest Teams client patch. 🚫

#patch
https://www.bleepingcomputer.com/news/security/new-synkloader-malware-pushed-in-microsoft-teams-phishing-campaign/