Microsoft Teams IT Support Scams Exploited for Malware and Ransomware Deployment

Cybersecurity researchers identified a recurring social engineering pattern where threat actors exploit Microsoft Teams' external chat feature to conduct IT support scams, deploy malware, and distribute ransomware. The attacks utilize disposable tenant accounts to impersonate IT departments and compromise organizational security.

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware.

"A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same 'IT

Read original article