They then voice- or video-called those employees via Teams from external accounts that were set up on other Microsoft 365 tenants ... under the Windows AppData directory. Malware was capable ...