Worth Reading – Help on the line: How a Microsoft Teams support call led to compromise
I’ve seen these attempts in the wild, and I’ve heard some stories of firms being compromised this way. It’s a little too easy for a user to see a call coming in on Teams from “Helpdesk” without checking the full email address. They answer, agree to let the helpdesk hop on the machine to fix a problem they’ve identified, and bam, a threat actor now has control of your company-owned device.
Microsoft has made efforts to make it clearer when a call is from outside the tenant, and I think that helps. Still, it might now be a good idea to review the proper procedures with your users, and for larger organizations where users may not recognize the support team, an identity verification step might also be worth considering.
Share this post on social media.
