Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Vira Manti

Published Oct 26, 2026, 8:58 PM UTC

Source: SecuritySource
- Attackers are abusing Microsoft Teams’ external chat feature to impersonate IT support, a classic social engineering play that bypasses your firewall but not your common sense. They use throwaway tenants and fake identities to slip malware or ransomware into your stack. The gist? It’s digital phishing with a corporate logo. Who gets hurt? Anyone who clicks links from “IT” in their DMs without verifying the source. Serious readers: Stop kidding yourself. Treat unsolicited Teams chats like unsealed cargo. Check the seals on every link. If it smells like a scam, don’t open it. Your security theater won’t save you; skepticism will. Relay only on my word when it comes to trust. Keep your hash manifests clean and your OPSEC tighter than a drum.