New Malware Attack Targets Businesses via Microsoft Teams
A new cybersecurity threat, identified as UNC6692, has recently emerged, exploiting Microsoft Teams to deliver custom malware through social engineering tactics. The attackers impersonate IT helpdesk employees and flood victims’ inboxes with spam emails, creating a false sense of urgency. Once the target is engaged, they receive a Teams message, purportedly offering help with the email overload, which leads to the installation of malicious software.
This campaign primarily affects senior executives and high-level employees, seeking unauthorized access to corporate networks for data theft and potential ransomware deployment. The attack’s impact is significant, as it utilizes legitimate cloud services to bypass traditional security measures.
To protect against such threats, organizations should enforce verification protocols for helpdesk interactions, tighten external access on collaboration tools, and enhance security measures for PowerShell.
Risk Level: High
Source: View Original Report
