Nearly 40 companies are affected, and Microsoft finds new cyber attacks using Teams to spread

CTOnews.com, August 4 (Xinhua)-- Microsoft recently reported a new attack on Microsoft Teams users, in which hacker groups use infected Microsoft 365 accounts to apply for domain names and then send phishing messages via Teams.

Microsoft reports that the hacker group, called Midnight Blizzard (or NOBELIUM) from Russia, first attacked small and medium-sized enterprises to gain access to Microsoft 365.

The group then registers its domain name through its Microsoft 365 account and sends phishing emails posing as these small and medium-sized enterprises on Teams. CTOnews.com note: this latest attack targets government, non-governmental organizations (NGO), IT services, technology, discrete manufacturing and media sector organizations.

Microsoft said that no more than 40 companies are currently affected, and that it has closed the malicious domain and continued to monitor the activity. They have notified the affected customers to help protect the environment.