
The rapid migration of corporate workflows to unified communication tools has inadvertently created a fertile environment for the STAC4749 cyber-extortion campaign, which leverages real-time voice interaction on Microsoft Teams to compromise secure networks. Between February and June 2026, this sophisticated threat actor targeted North American infrastructure by posing as internal IT support staff to manipulate unsuspecting employees. By exploiting the










