Beware of Fake Support Calls: The Ransomware Scam Targeting Businesses

Cybercriminals are stepping up their game, and your business could be the next target. A new ransomware scam is making waves, and it all starts with a seemingly innocent support call or a Teams chat request. Here’s what you need to know to stay protected.

The Scam: Fake IT Support Calls and Teams Messages

Imagine receiving a phone call from someone claiming to be from Microsoft Teams support. They sound convincing and even have technical knowledge. But behind the scenes, they’re orchestrating a dangerous ransomware attack.

These scams often begin with a flood of spam emails aimed at making an employee’s inbox unusable. Once frustration sets in, the scammer strikes with a phone call, pretending to be IT support ready to “fix” the issue.

Here’s their playbook:

1. Remote Access Request: They’ll ask your team member to install remote desktop software like AnyDesk or use tools like Windows Quick Assist.
2. Network Infiltration: Once inside, they move across your network, stealing sensitive data and planting ransomware.
3. Teams Impersonation: Scammers are also using Microsoft Teams to trick employees. They create accounts with names like “Help Desk” and fake domains such as “securityadminhelper.onmicrosoft.com” to send messages requesting device access.

The Consequences of Falling for the Scam

A ransomware attack can bring your business to a grinding halt. You could lose access to critical files and systems until a hefty ransom is paid. Daily activities, customer service, and projects might be completely derailed, causing significant operational disruption.

A breach also erodes trust with clients and partners, leading to lasting reputation damage. Beyond the ransom, the financial impact of recovery costs and potential legal consequences can be staggering.

How to Protect Your Business

Preventing this scam starts with awareness and robust security practices. Share these tips with your team:

1. Stay Skeptical of Unsolicited Calls and Messages: Always verify the identity of anyone requesting access to your devices or network.
2. Check with Your IT Team First: Before installing software or granting access, consult your in-house IT department or managed service provider.
3. Secure Microsoft Teams: Limit external chats to trusted domains, and enable chat logging for better oversight.
4. Train Your Employees: Regular cyber security training can help employees recognize and avoid phishing and impersonation scams.

Need Help Strengthening Your Defences?

We’re here to help you secure your business against evolving cyber threats. From configuring Microsoft Teams for maximum security to implementing comprehensive protection against ransomware, we’ve got you covered.

Contact us today or book a face-to-face appointment to safeguard your systems and protect your business from cyber criminals.