Security researchers say awareness training must explain other methods of phishing and go beyond just teaching users not to click on suspicious links.
Article Link: New API-based attacks on Microsoft Teams underscore the need for wider awareness training | SC Media