{"id":403,"date":"2026-07-31T08:23:48","date_gmt":"2026-07-31T08:23:48","guid":{"rendered":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/"},"modified":"2026-07-31T08:23:48","modified_gmt":"2026-07-31T08:23:48","slug":"microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/","title":{"rendered":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb"},"content":{"rendered":"\n

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og implementere Chaos ransomware.<\/p>\n\n\n\n

Sophos sporer kampagnen som STAC4749<\/a>. Sikkerhedsvirksomheden observerede snesevis af fors\u00f8gte angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering.<\/p>\n\n\n\n

Angribere udgiver sig for at v\u00e6re IT-medarbejdere p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriberne kontaktede medarbejdere gennem eksterne Microsoft Teams-konti. Under chats og taleopkald pr\u00e6senterede de sig som helpdesk-teknikere eller medlemmer af virksomhedens IT-afdeling.<\/p>\n\n\n\n

De h\u00e6vdede derefter, at de havde brug for adgang til medarbejderens computer for at l\u00f8se et teknisk problem. Deres m\u00e5l var at overtale m\u00e5let til at godkende en fjernsupport-session uden at verificere anmodningen gennem en intern kanal.<\/p>\n\n\n\n

N\u00e5r en medarbejder accepterede anmodningen, fik angriberne direkte adgang til enheden og begyndte at installere yderligere v\u00e6rkt\u00f8jer.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Hurtig assistance i senere angreb<\/h3>\n\n\n\n

Tidlige versioner af kampagnen var st\u00e6rkt afh\u00e6ngige af Microsoft Hurtig assistance, en legitim Windows-supportfunktion, der tillader en anden person at se eller styre en computer eksternt.<\/p>\n\n\n\n

N\u00e5r Hurtig assistance var blokeret eller utilg\u00e6ngelig, instruerede angriberne ofrene i at installere anden fjernstyringssoftware. De brugte i stigende grad den cloud-baserede RemSupp-tjeneste fra april og frem.<\/p>\n\n\n\n

Sophos vurderer, at RemSupp kan v\u00e6re blevet den foretrukne l\u00f8sning, fordi f\u00e6rre virksomheders applikationsblokeringslister genkendte den. Brugen af legitim fjernsupport-software hjalp ogs\u00e5 angriberne med at undg\u00e5 at implementere \u00e5benlyst ondsindede v\u00e6rkt\u00f8jer i angrebets f\u00f8rste fase.<\/p>\n\n\n\n

PowerShell downloader en vedvarende bagd\u00f8r<\/h3>\n\n\n\n

Efter at have f\u00e5et fjernadgang brugte angriberne PowerShell-kommandoer til at downloade en bagd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Malwaren indsamlede oplysninger om det kompromitterede system, oprettede persistensmekanismer og opretholdt adgang, efter at den oprindelige Teams- eller fjernsupport-session sluttede.<\/p>\n\n\n\n

For at f\u00e5 aktiviteten til at se legitim ud oprettede angriberne registerposter med navne, der mindede om Windows-lydkomponenter. Observerede navne omfattede Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse poster tillod malwaren at starte automatisk, samtidig med at det blev sv\u00e6rere for medarbejdere og administratorer at identificere den mist\u00e6nkelige proces.<\/p>\n\n\n\n

Angribere installerer flere fjernadgangsv\u00e6rkt\u00f8jer<\/h3>\n\n\n\n

I h\u00e6ndelser, der udviklede sig til ransomware, installerede gruppen yderligere fjernadgangsapplikationer, herunder DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse v\u00e6rkt\u00f8jer gav backup-adgang, hvis forsvarere afbr\u00f8d den oprindelige forbindelse. Angriberne fors\u00f8gte ogs\u00e5 at aktivere Remote Desktop Protocol, hvilket kunne hj\u00e6lpe dem med at f\u00e5 adgang til andre systemer og bev\u00e6ge sig p\u00e5 tv\u00e6rs af virksomhedens netv\u00e6rk.<\/p>\n\n\n\n

Sophos observerede gentagne \u00e6ndringer i angrebsk\u00e6den mellem februar og maj. Operat\u00f8rerne justerede deres v\u00e6rkt\u00f8jer, kommandoer og persistensmetoder, efterh\u00e5nden som sikkerhedsprodukter begyndte at registrere tidligere versioner.<\/p>\n\n\n\n

Chaos ransomware krypterede flere systemer p\u00e5 \u00e9n gang<\/h3>\n\n\n\n

Mindst tre STAC4749-angreb resulterede i implementering af Chaos ransomware. Under disse h\u00e6ndelser krypterede ransomwaren filer p\u00e5 tv\u00e6rs af flere kompromitterede computere p\u00e5 omtrent samme tid.<\/p>\n\n\n\n

Beviser fra mindst \u00e9t angreb tyder p\u00e5, at gruppen kan have stj\u00e5let virksomhedsdata, f\u00f8r krypteringen begyndte. Dette ville give angriberne mulighed for at l\u00e6gge pres p\u00e5 offeret med b\u00e5de dataeksponering og systemafbrydelse.<\/p>\n\n\n\n

Sophos vurderer, at kampagnen er \u00f8konomisk motiveret. Operat\u00f8rerne kan selv implementere ransomware eller give adgang til separate ransomware-tilknyttede grupper efter at have kompromitteret et netv\u00e6rk.<\/p>\n\n\n\n

Andre trusselsgrupper har ogs\u00e5 brugt Microsoft Teams til social engineering. Den iranske statsst\u00f8ttede MuddyWater-gruppe har brugt Teams og falsk ransomware-aktivitet til at skjule spionageoperationer.<\/p>\n\n\n\n

Chaos-relaterede kampagner har ogs\u00e5 brugt andre teknikker. I en separat operation brugte Chaos ransomware msaRAT til at skjule ondsindet trafik inde i Chrome og Edge.<\/p>\n\n\n\n

S\u00e5dan kan organisationer blokere Teams-vishing-angreb<\/h3>\n\n\n\n

Virksomheder b\u00f8r begr\u00e6nse ekstern Microsoft Teams-kommunikation eller n\u00f8je overv\u00e5ge beskeder og opkald fra konti uden for organisationen.<\/p>\n\n\n\n

Medarbejdere b\u00f8r aldrig godkende en uventet fjernsupport-anmodning uden at bekr\u00e6fte den via en officiel intern kontaktmetode. IT-afdelinger b\u00f8r ogs\u00e5 tydeligt forklare, hvilke v\u00e6rkt\u00f8jer deres teknikere bruger, og hvordan legitime supportanmodninger begynder.<\/p>\n\n\n\n

Sikkerhedsteams b\u00f8r blokere eller begr\u00e6nse Hurtig assistance, RemSupp, AnyDesk, DWAgent og lignende software p\u00e5 systemer, der ikke kr\u00e6ver fjernadministration.<\/p>\n\n\n\n

Organisationer b\u00f8r overv\u00e5ge us\u00e6dvanlig PowerShell-aktivitet, herunder uventede downloads eller kodede kommandoer, samt installation af nye eller uautoriserede fjernstyringsapplikationer. Denne adf\u00e6rd kan indikere, at en angriber har f\u00e5et f\u00f8rste adgang og fors\u00f8ger at etablere kontrol over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 holde \u00f8je med mist\u00e6nkelige registerposter, der efterligner legitim lydsoftware, fors\u00f8g p\u00e5 at aktivere Remote Desktop Protocol og eksterne Microsoft Teams-konti, der udgiver sig for at v\u00e6re intern supportpersonale. Sammen kan disse indikatorer hj\u00e6lpe med at identificere social engineering og aktivitet efter kompromittering tidligt i en angrebsk\u00e6de.<\/p>\n\n\n\n

I andre sikkerhedsnyheder k\u00e6mper Microsoft med at rette s\u00e5rbarheder<\/a> identificeret af Anthropics Claude Mythos. Efterh\u00e5nden som sikkerhedsforskning bliver mere automatiseret, kan angribere ogs\u00e5 finde og udnytte softwaresvagheder hurtigere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og implementere Chaos ransomware. Sophos sporer kampagnen som STAC4749. Sikkerhedsvirksomheden observerede snesevis af fors\u00f8gte angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering. Angribere udgiver sig for at […]<\/p>\n","protected":false},"author":49,"featured_media":404,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-403","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)<\/title>\n<meta name=\"description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\" \/>\n<meta property=\"og:description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport DK (Danish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:23:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\",\"datePublished\":\"2026-07-31T08:23:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/\"},\"wordCount\":822,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/\",\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"datePublished\":\"2026-07-31T08:23:48+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\",\"name\":\"WindowsReport DK (Danish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)","description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb","og_description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","og_url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/","og_site_name":"WindowsReport DK (Danish)","article_published_time":"2026-07-31T08:23:48+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb","datePublished":"2026-07-31T08:23:48+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/"},"wordCount":822,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/","url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/","name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg","datePublished":"2026-07-31T08:23:48+00:00","author":{"@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udrulle Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#primaryimage","url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg","contentUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/dk\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/dk\/#website","url":"https:\/\/windowsreport.com\/dk\/","name":"WindowsReport DK (Danish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/dk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/dk\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/comments?post=403"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/403\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media\/404"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media?parent=403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/categories?post=403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/tags?post=403"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/work?post=403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}