{
  "id": 16817255,
  "title": "Watch out — that Microsoft Teams chat might be hackers impersonating your IT support",
  "url": "https://urgent.news/2026/10/27/watch-out-that-microsoft-teams-chat-might-be-hackers-impersonating",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T23:05:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/watch-out-that-microsoft-teams-chat-might-be-hackers-impersonating-your-it-support"
  },
  "original_language": "en",
  "account": "Microsoft Teams chat may be hackers impersonating IT support, according to cybersecurity researchers. The attackers flood employees' inboxes with spam and then use Microsoft Teams to impersonate IT support. Once the victim believes the message is legitimate, the attacker requests remote access through a trusted tool like AnyDesk or ScreenConnect. The attackers then install tools such as AnyDesk or ScreenConnect to maintain access and conduct reconnaissance for potential ransomware or malware attacks. This campaign is enabled by the default Teams federation settings, which allow employees to receive messages from anyone with a Microsoft 365 account, regardless of the tenant. To protect against these attacks, Arctic Wolf recommends disabling any-tenant external chat in Teams and educating employees about the risks of trusting messages from Teams.",
  "summary": "Fake IT support pushes victims into granting hands-on access via remote management tools.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}