Microsoft Teams and the Quackbot Infection Chain

The US Army's Criminal Investigation Division is warning that they have received reports of soldiers receiving free smartwatches in the mail. Microsoft Teams limits the ability to send files to users within your own organization. The way Jumpsack Labs bypassed this was by basically just starting to write the message to a user in your own organization, attach the file and then when you're hitting submit, intercept the request with a proxy.