Google has warned about a new phishing campaign that exploits trust in workplace tools like Microsoft Teams. The attack targets employees through convincing chat messages by mimicking internal IT support.
The scam starts with a large number of spam emails sent to overwhelm the recipient. Soon after, attackers reach out via Teams, posing as helpdesk staff, warning of account issues and offering quick fixes. Cybersecurity experts have issued a warning against this scam.
According to security researchers, “a newly identified group called UNC6692 starts by flooding a person’s inbox with a large number of spam emails. This sudden wave makes it look like something is seriously wrong with the email account. Soon after, the attackers contact the victim through Microsoft Teams, posing as IT or support staff.”
So, how do you stay safe from these scams? Experts suggest that you need to enable two-factor authentication and keep systems updated. Here are some other safety nets you can follow:
Do not click on links sent by unknown or unverified accounts.
Avoid entering your password through links in messages. Just type the official website address yourself and go there directly.
Report any suspicious message. Report the message directly to your company or service provider
This new scam highlights how attackers are exploiting workplace tools. Awareness remains the first line of defense.
Also read: US Military Confirms Bitcoin Node Use for Cybersecurity Testing