GIFShell attack creates reverse shell using Microsoft Teams GIFs
-
A new attack technique called ‘GIFShell’ allows threat actors to abuse Microsoft Teams for novel phishing attacks and covertly executing commands to steal data using ... GIFs.
Beware of hackers bearing GIFs
"Microsoft supports sending HTML base64 encoded GIFs, but does not scan the byte content of those GIFs." <- because of course "no one" would ever do anything bad with those.
-
A new attack technique called ‘GIFShell’ allows threat actors to abuse Microsoft Teams for novel phishing attacks and covertly executing commands to steal data using ... GIFs.
Beware of hackers bearing GIFs
"Microsoft supports sending HTML base64 encoded GIFs, but does not scan the byte content of those GIFs." <- because of course "no one" would ever do anything bad with those.