[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-malware-poses-as-it-helpdesk-in-microsoft-teams-chats":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},5833,"malware-poses-as-it-helpdesk-in-microsoft-teams-chats","Malware Poses as IT Helpdesk in Microsoft Teams Chats","SynkLoader malware spreads via fake IT helpdesk messages on Microsoft Teams, tricking staff into installing tools that hand over full device control.","A new backdoor is spreading through Microsoft Teams by posing as your own IT department.\n\nResearchers at Expel say the malware, called SynkLoader, has been active for about a month. Attackers open with a direct Teams message claiming to be IT help desk staff, telling the target their computer is broken and that they need to install a \"PowerShell Cleaner\" tool to fix it. That tool is hosted on Microsoft Azure, which makes the link look far more legitimate than a random download. Once installed, SynkLoader can pull system information, open a reverse proxy, throw up a fake Windows lock screen to steal login passwords, or hand attackers a live PowerShell shell for full remote control.\n\nA stolen OS password is more valuable than it sounds: it lets attackers log into corporate systems from a device that already looks trusted, sidestepping the IP allow-list rules that would normally flag an outside login. That turns a malware problem into an identity problem, since the intruder shows up looking like a normal employee rather than a piece of malicious code security tools would flag.\n\nThe fake lock screen is convincing until you hit Alt+Tab and discover it is just a borderless window pretending to be Windows - proof that most of these attacks still succeed the old-fashioned way, by getting someone to trust the wrong message.","[\"security\",\"malware\",\"microsoft-teams\",\"phishing\"]","2026-08-24T17:15:00.000Z","2026-08-24T18:21:09.835Z","2026-08-24T18:21:21.721Z","published",null,[],"security",[24,26,27,28],"malware","microsoft-teams","phishing",[30],{"name":31,"url":32},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fnew-malware-targets-microsoft-teams-users-by-posing-as-your-companys-it-helpdesk",0,{"sections":35},[36,41,45,50,55,60,65,70,75,80,85,90,95,100],{"name":37,"slug":38,"count":39,"latest_published_at":40},"AI","ai",3326,"2026-08-24T15:46:32.000Z",{"name":42,"slug":24,"count":43,"latest_published_at":44},"Security",466,"2026-08-24T19:45:04.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",224,"2026-08-24T19:02:32.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",145,"2026-08-22T21:25:33.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",51,"2026-08-24T13:47:26.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]