Attackers Use Microsoft Teams IT Support Scams to Deploy Malware

Cybersecurity researchers have flagged a recurring social engineering pattern across hundreds of incidents in which threat actors abuse Microsoft Teams' external chat feature to impersonate IT support and deliver malware and ransomware. The campaigns rely on the same throwaway tenants and repeated impersonation tactics.

• Pattern seen across hundreds of Teams external chat incidents
• Attackers pose as IT support to deliver malware
• Same throwaway Microsoft tenants reused across attacks