Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Cybersecurity researchers describe a recurring social engineering pattern in which attackers use Microsoft Teams external chats to impersonate IT support and deliver malware. The attacks can progress from email bombing to Teams messages, remote access, payload execution, lateral movement, data exfiltration, and ransomware deployment.