10/17/2026
For a long time, businesses have been told to watch out for suspicious emails 👀
And it's still good advice.
But cybercriminals have realized people are becoming much better at spotting them…
So, they're changing tactics 🙄
A recent campaign saw attackers contact employees through Microsoft Teams, pretending to be members of the company's IT team.
The conversation starts normally.
They explain there's a problem with your computer, ask you to share your screen, and then guide you through installing what appears to be legitimate remote support software.
From that point on, the attackers are in control 😬
They can install malware, access company data, and move around the network without needing to break through your security in the traditional sense.
What struck me about this story is how ordinary the attack sounds.
There’s no dramatic hack or technical exploit.
It's just someone pretending to help.
So, we need to change how we approach cybersecurity.
Right now, we spend a lot of time teaching people not to click suspicious links.
But we also need to prepare them for unexpected phone calls, Teams messages and video calls from people claiming to be IT support.
When someone works in your IT team or for your IT partner, there should already be a recognized way they contact staff and verify who they are.
If something feels different, or you're being asked to install software or hand over control of your computer, it's a good idea to stop and check through another route before you do anything 🧐
Create a simple process for confirming you're talking to the right person.
Since we all now rely on tools like Microsoft Teams every day, it's only natural that attackers will try to blend into those app as well.
💭 If someone claiming to be IT support contacted one of your employees through Teams today, would they know how to verify that person before following their instructions?
