Matanbuchus 3.0 Leverages Microsoft Teams Voice Calls in Sophisticated Social Engineering Attacks
A dangerous new variant of the Matanbuchus malware loader is exploiting Microsoft Teams voice calls, impersonating IT helpdesks to trick victims into granting remote access. Morphisec researchers detail how Matanbuchus 3.0 deploys advanced evasion techniques, including Salsa20 encryption, direct syscalls, and anti-sandbox checks, posing a significant threat to enterprise security. This campaign underscores the escalating abuse of collaboration platforms for initial access and the malware's evolution into a highly sophisticated payload delivery system.