Threat Deep Dive: Fake IT Support Scams on Microsoft Teams
Every Tuesday we take one scam type and pick it apart properly. Today it's the fake IT support scam, and specifically the ones that start with a message on Microsoft Teams.
How it works
You get a message from someone you don't know, claiming to be from your company's IT support. They say there's a problem with your account and ask you to install a small tool so they can fix it. That tool is often malware, or it gives them remote access to your computer. From there, they can steal data or deploy ransomware.
Who is affected
These scams mainly target work accounts, but plenty of people use Teams on personal devices too. The same rules apply: if a stranger messages you claiming to be IT, be suspicious.
What to do
Don't click any links or install anything. Instead, contact your real IT team through a channel you already trust, like the service desk number on your intranet. Never use the contact details in the suspicious message itself.
Also in the news
Over 950 online stores have been infected with sneaky JavaScript, mostly on the Magento platform. The script is designed to avoid security scanners and steals payment details at checkout. If you've shopped online recently, check your bank and card statements and report anything odd straight away. Using a credit card for online shopping can give you stronger protection.
There's also a PHP security update for Windows, but that only matters if you run a website.
One action
If someone contacts you out of the blue claiming to be IT support, stop. Verify them through a number or channel you already trust before doing anything.
Related reading