Security · 1h ago
Chaos Ransomware Hits via Teams IT Support Scam in 17 Hours
Attackers posing as IT support on Microsoft Teams tricked a user into granting remote access, deploying ransomware within 17 hours. They used legitimate tools like Quick Assist and AnyDesk, plus a custom loader and SOCKS proxy, to move laterally and encrypt devices. Sophos detailed the attack, highlighting the speed and social engineering involved.
Meridian48 take
This attack underscores how a single social engineering success can escalate to full network compromise in under a day, emphasizing the need for strict external communication policies and rapid response.
Read the full reporting
STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam →
DEV Community
ransomwaresocial-engineering