|
Attackers Using Teams To Phish Users
It's often stated that the weakest point in any cyber defense is the person behind any given computer. That's again where attackers are targeting users in a new form of phishing attack.
In the latest trend of attacks, we're beginning to see not an exploit being used, but bad actors getting on devices because the user is allowing them on willingly. Often times, this type of attack starts off with something like an email bombing. This is where someone will suddenly begin getting loads and loads of spam in their email inbox. This is designed to get the user off guard and annoyed.
The damaging part of the attack itself comes next, where the very bad actor that initiated the email bombing reaches out to the user via Team. They will often hide themselves as tech support looking to assist with the very issue they caused. Plus, since they caused the incident, they can appear to have inside knowledge of the mailbox that they can use to convince the user they are tech support.
Once they've convinced the user they are tech support, they send information for how the user can connect them to their computer for "help". If the user proceeds with that, the bad actor has then gained access to the system and can attempt whatever it is they are looking to do from there,
End user training only becomes more important as time goes on and as such it's important that users know about attacks such as this so that they themselves aren't caught of guard if they should ever be targeted.
Should you be looking for other ways to train end users on potential attack vectors, please reach out to our offices to see how we can help. Of course, keep reading future issues of Tech Talk News, as well, where we'll discuss other attack methods as they begin to be implemented.
| 
