Hackers impersonate IT support in Microsoft Teams to gain remote access
Cybersecurity researchers report a widespread campaign where attackers flood inboxes with spam and then use Microsoft Teams to pose as IT staff.
Spam floods employee inboxes first
Victims receive hundreds of spam emails that bury legitimate messages. Shortly after this inbox flooding, a message appears from an account named IT Service Desk. This initial step allows the attackers to reach out directly through the collaboration tool.
Attackers request remote access tools
The impersonators claim to be support staff and ask for help with technical issues. They trick users into sharing remote access via software like Quick Assist or AnyDesk. Researchers observed this pattern in more than 400 separate incidents.
Reported by one outlet
Only one outlet has published this. Nothing here has been checked against a second report, so read it as that outlet's account and follow the link below for the original.
Reported by
1 independent outlet. Headline as published. Links open the original report.