TLDR InfoSec · QUICK LINKS
FAKE ZOOM, TEAMS MEETING INVITES USE COMPROMISED CERTIFICATES TO DROP MALWARE
Summary from the TLDR InfoSec newsletter
A February 2026 phishing campaign documented by Microsoft Defender researchers uses fake Zoom, Teams, and Adobe Reader update pages signed with a stolen EV certificate from TrustConnect Software PTY LTD to deliver RMM tools and establish persistent backdoor access for credential theft and ransomware deployment.