Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Cybersecurity researchers describe a recurring social engineering pattern in which attackers use Microsoft Teams’ external chat creation feature to impersonate IT support or deliver malware. The attacks are often preceded by inbox flooding with newsletter or subscription confirmations, followed by a Teams message offering to help resolve the apparent problem.