Potential Teams Security Risk

Level of Impact: Med

Urgency Level: Low

Purpose: To inform MORPC staff of a new cybersecurity threat to Microsoft Teams. 

Details: We want to inform you about a new security threat involving the Black Basta ransomware group. While this is not an active threat currently affecting MORPC, it is important for all staff to be aware. This group is posing as IT support on Microsoft Teams to breach networks. They initiate contact by sending a large volume of spam emails and then impersonate IT helpdesk staff to gain remote access to devices. Once access is obtained, they deploy ransomware to encrypt files and steal data.

User Action Required: 

• Be cautious of unsolicited messages on Microsoft Teams, especially from external accounts.

• Do not share personal or sensitive information through Teams chats.
• Report any suspicious activity to the IT team immediately.