Fake IT support calls on Microsoft Teams push EtherRAT malware

Fake IT bods on Microsoft Teams coax workers into installing malware

Cybercriminals are using fake IT support calls on Microsoft Teams to persuade employees to surrender control of their PCs before installing the EtherRAT remote access trojan, according to researchers at Palo Alto Networks' Unit 42. Victims receive a phishing email disguised as an employee survey before a follow-up Microsoft Teams call from someone claiming to be IT support. During the call, the attacker persuades the target to hand over remote c…

Fake IT support calls on Microsoft Teams push EtherRAT malware

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial access to corporate networks. [...]

Hackers Leverage Microsoft Teams Call to Install RMM Tools and Deploy EtherRAT

Open the article to view the coverage from Cyber Security News

Fake Microsoft Teams IT Support Calls Used to Spread EtherRAT Malware

Copyright protected content copied from PhoneWorld website. Cybersecurity researchers have uncovered a new attack campaign in which cybercriminals use fake Microsoft Teams support calls to infect company computers with a dangerous malware known as EtherRAT. The attackers pretend to be members of an organization’s IT department and convince employees to give them remote access to their devices. The campaign was recently identified by Palo Alto Ne…

Hackers Abuse Cross-Tenant Teams Chat to Deliver EtherRAT Through Malicious MSI Loader

A coordinated social-engineering campaign observed in late June 2026 combined email phishing with an abused Microsoft Teams cross‑tenant chat to deliver a sophisticated EtherRAT implant via a malicious MSI loader. Initial access began with a targeted email masquerading as internal communication: an “Employee Survey” HTML message containing a PDF lure. When the victim opened the […] The post Hackers Abuse Cross-Tenant Teams Chat to Deliver EtherR…