Have you ever received a call claiming to be from Microsoft Teams support? Pause before following their instructions—it could be a scam.
A growing trend sees scammers impersonating “help desk” staff to trick employees into granting them access to their devices. This is often part of a larger ransomware attack, where your business data is held hostage until you pay a steep ransom.
How This Scam Works
Recently, cybercriminals have stepped up their game:
- Flood the Inbox: An employee’s inbox is overwhelmed with spam, rendering it useless.
- Pose as IT Support: They call, claiming to fix the issue, and ask the employee to install remote desktop tools like AnyDesk or use built-in software like Windows Quick Assist.
Once access is granted, the scammers infiltrate your network, steal sensitive data, and deploy ransomware across your devices.
They’re not stopping at phone calls either. Scammers now create fake Microsoft Teams accounts, pretending to be IT support. By using deceptive usernames like “Help Desk” and fake Microsoft domains (e.g., securityadminhelper.onmicrosoft.com), they send direct messages to employees, requesting access to devices.
The Risks Are High
A ransomware attack can:
- Lock You Out: Deny access to your data.
- Disrupt Operations: Halt customer service and business processes.
- Leak Sensitive Data: Risk breaching confidentiality.
- Cost You Money: Recovery expenses, ransom payments, and legal consequences.
- Damage Your Reputation: Erode trust with customers and partners.
Stay Safe
Protect your business by:
- Educating Your Team: Share this warning and advise caution with unsolicited calls or messages.
- Verifying Requests: Always check with your actual IT department before installing software or granting access.
- Securing Teams: Configure Microsoft Teams to allow external chats only from trusted domains, and enable chat logging.
Need Help?
We can assist in safeguarding your systems against threats like these. Let’s keep your business secure, get in touch today.
