TLDR InfoSec · QUICK LINKS

FAKE ZOOM, TEAMS MEETING INVITES USE COMPROMISED CERTIFICATES TO DROP MALWARE

hackread.com2 min read

Summary from the TLDR InfoSec newsletter

A February 2026 phishing campaign documented by Microsoft Defender researchers uses fake Zoom, Teams, and Adobe Reader update pages signed with a stolen EV certificate from TrustConnect Software PTY LTD to deliver RMM tools and establish persistent backdoor access for credential theft and ransomware deployment.