Microsoft Teams reply spoofing: Trolling your friends and colleagues

Earlier this year, we discovered an interesting behavior in Microsoft Teams chat functionality that allowed us to phish our coworkers and earn a free pizza.

By modifying the request it’s possible to change various parameters of the message we’re replying to, i.e., its content, time of creation, and author.