To all those using Office 365 Email services, here’s a message that might need your attention. Cyber crooks are seen sending phishing emails to over 50,000 email boxes every week, to steal employee credentials, and that was discovered by security researchers at Abnormal Security.
The California based company says that the campaign is being run in an automated way with the subject line “There is a new activity in Teams” where hackers are seen targeting only Office users.
Speaking precisely, the email appears to be a genuine email sent by Microsoft Teams services, but in reality it is actually a fake service mail. Abnormal Security researchers say that the mail is actually meant to alert users to notify the recipients that their teammates are trying to reach them and is seen asking them to click on the below link to start a conversation with them.
And those who click the link are being directed to a malicious phishing page where they are asked to enter their email and passwords- and from their the cyber risk starts as employees are seen indirectly inviting hackers to explore their corporate networks.
Note- Microsoft Teams is a business communication chatting platform developed by the Satya Nadella led company and similar to the service of Slack. Technically, it a storage platform where teams can chat and video-conference with each other along with application integration. Launched in March 2017, the service is a replacement to Skype for Business and Microsoft Classroom. In March 2020, Microsoft announced that its Office 365 integrated Teams service has hit 44 million daily users- all because of the COVID-19 Pandemic shut down worldwide.
