HACKERS Can Exploit Teams | convoC2

In this video, we dive into convoC2, a groundbreaking Command and Control (C2) tool that leverages Microsoft Teams to execute stealthy red team operations. By embedding commands in hidden span tags and disguising output in Adaptive Cards image URLs, this tool represents the cutting edge of offensive cybersecurity.

Discover how convoC2 operates, why it’s so difficult to detect, and its potential implications for both red and blue teams. From cross-platform compatibility to exploiting message caching, convoC2 showcases how trusted platforms can be weaponized in creative and sophisticated ways.

⚠️ For Educational Purposes Only ⚠️
This video is intended to raise awareness about the evolving cybersecurity landscape and highlight the importance of strong defenses. Unauthorized use of tools like convoC2 is illegal and unethical. Always operate within the boundaries of the law and ethical hacking guidelines!

[artywatts]

our favorite AI created NSA youtube creator Pog

[zerocool]

Teams is so insecure even through azure it sucks

[KurtVanBever]

Good job keeping it together when you read that disclaimer. 🤣

[VespyPrem]

Great video ! Thank you for the information

[citycen]

Here from Linked in, just to reinforce the algorithm.

[mayank]

Cool video. Hey, which distro do you use?

[Moziilla.Firefox]

time to switch to linux and find Microsoft apps alternativs

[dragoneye]

Great video, tnx for info. Teams is gone byby for me 😀

[thuslymars]

Maddy posted🎉🎉🎉 I've Been doubling at work. My friend Claire 's cold gotten worse too sick to interview the spectrum community. Been closely monitoring 2023 lawsuit alleging that HR software vendor Workday is directly liable for unlawful employment discrimination caused by an employer’s use of Workday’s AI-powered hiring technology.
Some trolls crashed the SHRM Workplace Law Forum Archived nov. 2024. Now in December they wanted to know if the robot army that the logistics in the u.k. automation for both warehousing and ports are being built for Terminator revolution purposes. I would have just told them "we don't know and please touch grass."

[aashikyadav]

Do a attacker have to install convoC2 agent in the victim device?

[rigopalacios]

Muy importante! Indeed! And you should definitely speak more español during your videos!

[Shangai]

It is safe to use Teams only in browser?

[nickolasnewnham]

It is all Mui Importante, excuse my spelling.😂

[Shoe_On_Head]

Except in a real world scenario inbound and outbound comms via Teams is most likely blocked.

Yes, if you weaken security you will get vulnerabilities.