Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers describe a recurring social-engineering pattern in which attackers use Microsoft Teams external chat to impersonate IT support or deliver malware. The attacks commonly use newly created or acquired Microsoft 365 tenants, IT-themed display names, email bombing, and vishing to obtain hands-on-keyboard access to victims’ systems.
CERT24