CYBERSECURITYTRACKER
Permanent story citation

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11361

As cited

Copy frozen at (site build).

ransomware

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Researchers have identified a recurring social engineering campaign in which threat actors use Microsoft Teams' external chat feature to impersonate IT support and deliver malware or ransomware. The pattern involves reused throwaway tenant accounts and consistent messaging tactics across hundreds of observed incidents.

Why it matters: Organizations using Microsoft Teams are targeted by these scams; security teams should educate users to verify IT requests through established channels and monitor for suspicious external chat invitations claiming to be from support.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Researchers have identified a recurring social engineering campaign in which threat actors use Microsoft Teams' external chat feature to impersonate IT support and deliver malware or ransomware. The pattern involves reused throwaway tenant accounts and consistent messaging tactics across hundreds of observed incidents.

Why it matters: Organizations using Microsoft Teams are targeted by these scams; security teams should educate users to verify IT requests through established channels and monitor for suspicious external chat invitations claiming to be from support.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary