Cybercriminals use Microsoft Teams to trick victims into installing malware

The popular voice and video calling service Microsoft Teams was used to carry out new virtual scams. The platform has become a favorite of cybercriminals trying to access victims’ computer credentials or files, especially in the corporate world.

The Trend Micro report detailed how the scam works by applying a mix of social engineering and phishing. It involves sophisticated conversational techniques and identity spoofing, a method known as . avid – combining voice searches with the act of getting you to download or access fake content.

Purpose of the crime causing a person to install malware that can gain remote access to their computer access files or obtain access credentials. Since most targets are company employees, it is possible to later use the stolen data to invade systems or even carry out other company-wide scams, such as ransomware.

How does the attack occur via Microsoft Teams?

According to Trend Micro, one of the recorded cases involved a fraudulent attempt against an unidentified woman. HE initially received several fake emailsIt is a classic fraud method that is already well known in the corporate world.

Starting from the second stage, the plan becomes more detailed. After a while, the person receives a call request by voice From Microsoft Teams. On the other side, there is a so-called colleague, such as an account representative, an outsourcing service provider, or even someone who claims to be from the company’s IT industry.

It is in this call that social engineering happens: in chat, victim is tricked into downloading a file and following installation instructions. Instead of being an important document or a solution to a problem, the download is actually a program like this: AnyDeskTo guarantee remote access privileges to the criminal via malware.

Loaded threat, Dark DoorIt has the ability to allow control of a computer, execute codes, and collect confidential information from a system. In the case the investigation followed, the cybercriminal’s effort failed, but The complexity of the plan warned experts.

According to the report, Microsoft is also aware that Teams is being used for fraudulent purposes. But for now Users should be wary of suspicious searches and do not click on any links in chats These are still the most recommended actions to stay safe.