If you receive a call claiming to be from Microsoft Teams support, take a moment to think before following any instructions.
Scammers are increasingly posing as “help desk” staff, aiming to deceive employees into granting them access to their devices.
This tactic is part of a larger ransomware attack strategy, where businesses are locked out of their data and forced to pay substantial sums to regain access.
Recently, a notorious cybercriminal group has escalated this scam to alarming levels.
Their method begins by overwhelming an employee’s inbox with spam, rendering it unusable. Next, they call, impersonating IT support, and offer to “resolve” the issue.
They may instruct employees to install remote desktop software like AnyDesk or use built-in tools like Windows Quick Assist. Once access is granted, they exploit it to navigate your network, harvest sensitive data, and deploy ransomware.
But the deception doesn’t stop there. Scammers are now setting up Microsoft Teams accounts to impersonate IT support.
Using names like “Help Desk” and fake Microsoft tenant domains such as “securityadminhelper.onmicrosoft.com,” they send direct messages to employees, claiming they need access to their devices.
Ransomware attacks are no small matter. Beyond locking you out of your data, they can halt operations, disrupt customer service, and risk the exposure of confidential information.
The recovery process is often costly—not just in terms of paying the ransom, but also in managing the aftermath. It can lead to revenue losses, reputational damage, and even legal ramifications.
Educate your team about this scam and stress the importance of being wary of unsolicited support calls or Teams messages. Employees should always verify with your actual IT department before installing software or granting access to devices.
If your business uses Microsoft Teams, take steps to secure it. Restrict external chats to trusted domains, enable chat logging, and ensure all security features are properly configured.
Need expert help to strengthen your defences? We’re here to assist. Get in touch.
