Watch out — that Microsoft Teams chat might be hackers impersonating your IT support
- Attackers flood inboxes with spam, then impersonate IT support through Microsoft Teams messages and calls
- Victims are tricked into sharing remote access via Quick Assist, AnyDesk, or ScreenConnect
- Researchers observed 400+ incidents, warning default Teams federation settings enable the social-engineering campaign
Cybersecurity researchers Arctic Wolf have warned of an ongoing, widespread hacking campaign that includes an email inbox flooded with spam messages, a Teams account impersonating IT support, and the use of absolutely legitimate, everyday software.
The goal seems to be persistent access, possibly in preparation of a subsequent malware or ransomware infection.
How the attack plays out
In its report, Arctic Wolf said it observed the same pattern in more than 400 cases. It starts with the victim - an employee in the target company - receiving hundreds, possibly thousands of spam emails in a very short timeframe, so their inbox gets absolutely flooded with junk, burying any...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
