Microsoft Teams Phishing Attacks Are Targeting Businesses Right Now

Threat level

If your business uses Microsoft Teams, attackers are sending messages through it that look like they come from IT, coworkers, or vendors, containing links to fake login pages or requests to install remote access software.

Quick Summary

  • Phishing attacks are happening inside Microsoft Teams chat, not just email

  • Messages appear to come from trusted internal contacts, which makes them harder to catch

  • Fix: Verify any unexpected link, file, or software request by phone before clicking

How This Scam Works

Unlike email phishing, these messages appear inside your company chat, which creates a false sense of security. Attackers compromise vendor accounts or create accounts that closely impersonate a real person's display name, then send urgent requests to click links or install software.

What To Do Right Now

1
Do not click links or open files in unexpected Teams messages.
Even if the sender's name looks familiar.
2
Verify through a different channel.
Call the person or send a separate email before acting.
3
Report suspicious messages.
Use Teams' built-in report option and notify your IT administrator.
4
Restrict external messaging in Teams settings.
This removes a common entry point for attackers.

Stay Protected Going Forward

Create a team policy: any unexpected request in Teams involving a link, file, or software gets verified by phone first.

Protect your small business without needing an IT department. Get the Business Security Kit at simpledigitalsafety.com/shop

Get Scam Alerts Before They Hit

Join our free weekly alerts.

Protection Made Simple for Families

Making digital security simple, practical, and accessible for families. No tech jargon, no overwhelm, just real advice that works.

© 2026 Simple Digital Safety. All rights reserved.