Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Threat actors are using Microsoft Teams' external chat creation feature to impersonate IT support and deploy malware, according to Arctic Wolf Labs.

Earlier attacks and coverage

• Microsoft Teams to get AI-powered, context-aware phishing detection (2026-10-23)
• ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan (2026-10-20)
• Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware (2026-10-20)
• Researchers Infiltrate Microsoft Tech Support Scam Operation (2026-10-19)

Business impact

Organizations face the risk of data breaches and ransomware attacks, leading to potential financial losses and operational disruptions.

Industries affected

All industries are potentially affected, as the scam is not limited to any specific sector.

Users affected

Employees and IT administrators may fall victim to these scams, leading to personal and organizational data exposure.

Sources

• Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware (The Hacker News)