Help-Desk Lures Drop KongTuke's Evolved ModeloRAT

KongTuke, a financially motivated threat group, is now using external Microsoft Teams chats to impersonate help-desk staff and rapidly deploy a resilient, multi-layered ModeloRAT toolkit that achieves persistent access within five minutes—making traditional defenses and single-channel containment dangerously inadequate.