VANILLA TEMPEST'S RHYSIDA RANSOMWARE ATTACKS FOILED

Summary from the TLDR InfoSec newsletter

Microsoft dismantled an attack campaign by Vanilla Tempest (also called Vice Society), which used fake Microsoft Teams installers and over 200 fraudulent certificates to spread the Rhysida ransomware. The attackers used malicious ads and SEO techniques to lure users, delivering malware that enabled data theft and additional payload delivery.