17/10/2026
Cyber criminals aren't only hiding in suspicious emails anymore.
A recent attack campaign involved criminals contacting employees through Microsoft Teams while pretending to be the company's IT support.
The approach sounds completely ordinary: there's a problem with your computer, please share your screen, now install this remote support tool.
Once access is granted, the attacker can take control, install malware or access company data.
What makes this effective is that there may be no obvious “hack”. Someone is simply pretending to help.
That means security awareness needs to go beyond “don't click suspicious links”. Staff should also know how genuine IT support will contact them and how to verify an unexpected request.
If someone asks you to install software, share your screen or hand over control of your computer unexpectedly, stop and confirm who they are through another trusted route.
A simple verification process can prevent a very expensive mistake.
💭 If someone claiming to be IT support messaged your employees through Teams today, would they know how to verify them?