BladesDynamicDemoBlade

Forbes replacement logo

News

Bleeping computer logo

Tech republic logo

Attackers are exploiting the surge in the use of Microsoft Teams in an attempt to trap unsuspecting users, says Abnormal Security.

Phishing attacks spoof Microsoft Teams to steal user credentials

A highly convincing phishing campaign is using cloned imagery from automated Microsoft Teams notifications in attacks that attempt to harvest Office 365 credentials.

The Microsoft Teams cloud collaboration platform has experienced a huge usage spike since the start of the COVID-19 pandemic, with Microsoft announcing on March 30 that the platform has reached 75 million daily active users (DAUs), with a 70% increase since March 19 when it reported 44 million DAUs.


 
The phishing emails that spoof Microsoft Teams file share and audio chat notifications have so far landed in the inboxes of 15,000 to 50,0000 targets based on stats from researchers as email security company Abnormal Security.

Convincing Office 365 phishing uses fake Microsoft Teams alerts

Bank info security logo

A new phishing attack was discovered toward the end of last week that aims to steal people's Office 365 login details. The attack used cloned imagery to send convincing emails that pretends to be Microsoft Teams notifications.

Tricky phishing attack targets Microsoft Teams users — here's how to protect yourself

A recently uncovered phishing campaign is spoofing notifications from Microsoft's Teams collaboration platform in order to harvest Office 365 credentials from employees working from home offices because of the COVID-19 pandemic. The email message in this phishing campaign tells victims that their signature is needed on a document entitled "PPP_CARES_SignaturePG1-2," and contains a link to a webpage that supposedly has more information.

Latest Phishing Campaign Spoofs Microsoft Teams Messages

Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

A new report reveals how security researchers have observed thousands of cloned Microsoft Team login pages being used in an attempt to harvest account passwords.

Beware This New Microsoft Teams Password Hacking Threat To 75 Million Users

A new report reveals how security researchers have observed thousands of cloned Microsoft Team login pages being used in an attempt to harvest account…

description

security, researchers, observed, thousands, cloned, microsoft, team, login, pages, used, attempt, harvest, reveals, account, report

keywords

https://images.abnormalsecurity.com/production/images/press/Screenshot-2023-03-30-at-5.22.40-PM.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1680211449&s=001f405626410630ddf22510650bf91f

Beware This New Microsoft Teams Password Hacking Threat To 75 Million…

https://abnormal.ai/about/news/beware-this-new-microsoft-teams-password-hacking-threat-to-75-million-users

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/press/Screenshot-2023-03-30-at-5.22.40-PM.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1680211449&s=48041ce92e2c8483af0f2ff1e0118b4a

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Beware This New Microsoft Teams Password Hacking Threat… | Abnormal AI"}}

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

<p>Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.</p>

Newsroom

Introducing Abnormal’s Biggest Product Release Yet

<p>Announcing Our Biggest Product Release Yet</p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

EmbeddedVideo

EyebrowText

Footer

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

Gartner mq 4x

Analyst Research

Gartner names Abnormal a Leader in Email Security Platforms, placed furthest for Completeness of Vision.

Abnormal Named a Leader in 2024 Gartner® Magic Quadrant™

Email Security

B 1500x1500 MKT856 Aimpoint report 1

White Papers

Discover how replacing your SEG with Abnormal’s behavioral AI boosts protection, cuts costs, and reduces manual work—backed by real customer results.

The Unexpected Benefits of Replacing a Secure Email Gateway with Abnormal AI

Abnormal Platform

B 1500x1500 Aim Point SAT Awareness Survey Report

Discover why traditional SAT programs are falling short and how modern, AI-enhanced approaches reduce human risk and improve your security posture.

2025 State of Security Awareness Training

B Inside the AI Arms Race Malicious AI WP

Discover how attackers are abusing trusted AI tools and using malicious GPTs to scale cybercrime—and how to stay ahead of the threat.

Inside the AI Arms Race: How Cybercriminals Exploit Trusted Tools and Malicious GPTs

Generative AI

B H1 2025 Email Threat Report

Threat Reports

Learn how the malicious use of AI is amplifying the impact of BEC, VEC, and phishing attacks in our latest threat report.

H1 2025 - Adversarial AI: Attacker Innovation Escalates Advanced Email Threats

Beware This New Microsoft Teams Password Hacking Threat To 75 Million Users

See How Abnormal AI Protects Humans