Beware of Scams in Microsoft Teams

How Attackers Are Using Microsoft Teams

Microsoft Teams users are being targeted by a new campaign to steal sensitive information and files, warns cybersecurity firm Unit 42. The campaign starts with an email asking users to participate in a survey. The email contains a malicious attachment.

The attackers are using a well-known tactic to gain the trust of their victims. They are sending emails that appear to come from within the organisation, making it more likely that the recipient will open the attachment. If the user opens the attached PDF, it leads to a fake Microsoft login page.

The fake login page is designed to capture the user's login credentials, which can then be used to access sensitive information and files. Unit 42 has observed that the attackers are using a legitimate Microsoft Teams feature to host the malicious content, making it harder to detect.

Can You Trust That Survey Request?

The attackers are likely using the stolen credentials to gain access to the victim's Microsoft Teams account, allowing them to move laterally within the organisation. This could lead to further malicious activity, such as data theft or financial fraud.

As the use of Microsoft Teams continues to grow, it is likely that attackers will continue to target users of the platform. Organisations should educate their employees on the risks associated with suspicious emails and attachments.

Users should be cautious when receiving unsolicited emails, even if they appear to come from within their organisation. Verifying the authenticity of the email and being aware of the latest tactics used by attackers can help prevent falling victim to this campaign.

Frequently Asked Questions

What should I do if I receive a suspicious email in Microsoft Teams? Be cautious and verify the authenticity of the email before opening any attachments. If in doubt, contact your IT department.

How can I protect my Microsoft Teams account from being compromised? Use strong passwords, enable two-factor authentication, and keep your software up to date.

What are the consequences of falling victim to this campaign? Your login credentials and sensitive information may be stolen, potentially leading to data theft or financial fraud.