Think twice before answering that “support call” – it might be a ransomware scam
Have you received a call claiming to be from Microsoft Teams support? Be cautious – it could be a trap.
Scammers are increasingly pretending to be “help desk” representatives, targeting employees to gain control of their devices.
This is a key tactic in ransomware attacks, where businesses are locked out of their data unless a substantial payment is made to regain access.
One infamous cybercrime group has escalated this scam further. Their strategy starts with bombarding an employee’s email inbox with excessive spam, rendering it almost unusable. Then, they follow up with a phone call, posing as IT support and offering to “resolve” the issue.
These fraudsters often request employees to install remote desktop software like AnyDesk or utilise built-in tools such as Windows Quick Assist. Once they’ve gained access, they navigate your network, harvest sensitive data, and deploy ransomware on your devices.
But it doesn’t stop there. These criminals are now leveraging Microsoft Teams to appear even more convincing.
By creating accounts with usernames like “Help Desk” and fake tenant domains such as “securityadminhelper.onmicrosoft.com,” they impersonate IT support staff and send direct messages to employees, requesting access to their devices.
Ransomware attacks are no minor inconvenience. They can lock you out of critical data, halt operations, disrupt customer service, and expose confidential information.
The financial repercussions of such attacks can be significant – not just from paying the ransom but also from the operational downtime, loss of revenue, and potential reputational damage. There could even be legal implications if sensitive data is leaked.
Educate your team about this scam and encourage caution with unsolicited support calls or suspicious Teams messages. Employees should always confirm such requests with your actual IT department before installing any software or granting access.
Additionally, ensure your Microsoft Teams environment is secure. Restrict external chats to trusted domains and enable chat logging for an added layer of protection.
Need expert guidance to enhance your security? We’re here to help. Contact us today for tailored advice on safeguarding your business’s IT systems.
