A Fake Teams Update Can Give Hackers Two Separate Ways to Control Your PC

A new phishing operation, tracked as Operation BlueDash, is tricking users into installing a fake Microsoft Teams update that silently hands attackers not one but two independent ways to remotely control infected computers. The infection starts with an email claiming a document was “too large” to send directly and was instead shared securely through Microsoft Teams. ZeroBEC Team observed that when victims click the embedded link, they are routed through compromised websites to a convincing fake Microsoft Store page, complete with Teams branding, screenshots, and a spoofed Windows taskbar, all designed to look like a legitimate software update prompt. This social-engineering approach mirrors a growing trend of...

Read the full article at the source.