{"id":405,"date":"2026-07-31T08:25:39","date_gmt":"2026-07-31T08:25:39","guid":{"rendered":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/"},"modified":"2026-07-31T08:25:39","modified_gmt":"2026-07-31T08:25:39","slug":"microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/","title":{"rendered":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb"},"content":{"rendered":"\n

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og implementere Chaos ransomware.<\/p>\n\n\n\n

Sophos sporer kampagnen som STAC4749<\/a>. Sikkerhedsfirmaet observerede snesevis af fors\u00f8gte angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering.<\/p>\n\n\n\n

Angribere udgiver sig for IT-medarbejdere p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriberne kontaktede medarbejdere via eksterne Microsoft Teams-konti. Under chat og taleopkald pr\u00e6senterede de sig som helpdesk-teknikere eller medlemmer af virksomhedens IT-afdeling.<\/p>\n\n\n\n

De h\u00e6vdede derefter, at de havde brug for adgang til medarbejderens computer for at l\u00f8se et teknisk problem. Deres m\u00e5l var at overtale m\u00e5let til at godkende en fjernsupport-session uden at verificere anmodningen via en intern kanal.<\/p>\n\n\n\n

N\u00e5r en medarbejder accepterede anmodningen, fik angriberne direkte adgang til enheden og begyndte at installere yderligere v\u00e6rkt\u00f8jer.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Hurtig assistent i senere angreb<\/h3>\n\n\n\n

Tidlige versioner af kampagnen st\u00f8ttede sig i h\u00f8j grad p\u00e5 Microsoft Hurtig assistent, en legitim Windows-supportfunktion, der g\u00f8r det muligt for en anden person at se eller styre en computer eksternt.<\/p>\n\n\n\n

N\u00e5r Hurtig assistent var blokeret eller utilg\u00e6ngelig, instruerede angriberne ofrene i at installere anden fjernstyringssoftware. De brugte i stigende grad den skybaserede RemSupp-tjeneste fra april og frem.<\/p>\n\n\n\n

Sophos mener, at RemSupp kan v\u00e6re blevet den foretrukne mulighed, fordi f\u00e6rre virksomheders applikationsblokeringslister genkendte den. Brug af legitim fjernsupport-software hjalp ogs\u00e5 angriberne med at undg\u00e5 at anvende \u00e5benlyst ondsindede v\u00e6rkt\u00f8jer i den f\u00f8rste fase af angrebet.<\/p>\n\n\n\n

PowerShell downloader en vedvarende bagd\u00f8r<\/h3>\n\n\n\n

Efter at have opn\u00e5et fjernadgang brugte angriberne PowerShell-kommandoer til at downloade en bagd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Malwaren indsamlede oplysninger om det kompromitterede system, oprettede persistensmekanismer og opretholdt adgang, efter at den oprindelige Teams- eller fjernsupport-session sluttede.<\/p>\n\n\n\n

For at f\u00e5 aktiviteten til at fremst\u00e5 legitim oprettede angriberne registreringsposter med navne, der lignede Windows-lydkomponenter. Observerede navne omfattede Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse poster tillod malwaren at starte automatisk, samtidig med at det blev sv\u00e6rere for medarbejdere og administratorer at identificere den mist\u00e6nkelige proces.<\/p>\n\n\n\n

Angribere installerer flere fjernadgangsv\u00e6rkt\u00f8jer<\/h3>\n\n\n\n

I h\u00e6ndelser, der udviklede sig til ransomware, installerede gruppen yderligere fjernadgangsapplikationer, herunder DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse v\u00e6rkt\u00f8jer gav backup-adgang, hvis forsvarere afbr\u00f8d den oprindelige forbindelse. Angriberne fors\u00f8gte ogs\u00e5 at aktivere Remote Desktop Protocol, hvilket kunne hj\u00e6lpe dem med at f\u00e5 adgang til andre systemer og bev\u00e6ge sig p\u00e5 tv\u00e6rs af virksomhedens netv\u00e6rk.<\/p>\n\n\n\n

Sophos observerede gentagne \u00e6ndringer af angrebsk\u00e6den mellem februar og maj. Operat\u00f8rerne justerede deres v\u00e6rkt\u00f8jer, kommandoer og persistensmetoder, efterh\u00e5nden som sikkerhedsprodukter begyndte at opdage tidligere versioner.<\/p>\n\n\n\n

Chaos ransomware krypterede flere systemer p\u00e5 \u00e9n gang<\/h3>\n\n\n\n

Mindst tre STAC4749-angreb resulterede i implementering af Chaos ransomware. Under disse h\u00e6ndelser krypterede ransomwaren filer p\u00e5 tv\u00e6rs af flere kompromitterede computere p\u00e5 omtrent samme tid.<\/p>\n\n\n\n

Beviser fra mindst \u00e9t angreb tyder p\u00e5, at gruppen muligvis har stj\u00e5let virksomhedsdata, f\u00f8r krypteringen begyndte. Dette ville give angriberne mulighed for at presse offeret med b\u00e5de dataeksponering og systemforstyrrelse.<\/p>\n\n\n\n

Sophos vurderer kampagnen som \u00f8konomisk motiveret. Operat\u00f8rerne kan selv implementere ransomware eller give adgang til separate ransomware-partnere efter at have kompromitteret et netv\u00e6rk.<\/p>\n\n\n\n

Andre trusselsgrupper har ogs\u00e5 brugt Microsoft Teams til social engineering. Den iranske statsst\u00f8ttede MuddyWater-gruppe har brugt Teams og falsk ransomware-aktivitet til at skjule spionageoperationer.<\/p>\n\n\n\n

Chaos-relaterede kampagner har ogs\u00e5 brugt andre teknikker. I en separat operation brugte Chaos ransomware msaRAT til at skjule ondsindet trafik inde i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisationer kan blokere Teams-vishing-angreb<\/h3>\n\n\n\n

Virksomheder b\u00f8r begr\u00e6nse ekstern Microsoft Teams-kommunikation eller n\u00f8je overv\u00e5ge beskeder og opkald fra konti uden for organisationen.<\/p>\n\n\n\n

Medarbejdere b\u00f8r aldrig godkende en uventet fjernsupport-anmodning uden at bekr\u00e6fte den via en officiel intern kontaktmetode. IT-afdelinger b\u00f8r ogs\u00e5 tydeligt forklare, hvilke v\u00e6rkt\u00f8jer deres teknikere bruger, og hvordan legitime supportanmodninger starter.<\/p>\n\n\n\n

Sikkerhedsteams b\u00f8r blokere eller begr\u00e6nse Hurtig assistent, RemSupp, AnyDesk, DWAgent og lignende software p\u00e5 systemer, der ikke kr\u00e6ver fjernadministration.<\/p>\n\n\n\n

Organisationer b\u00f8r overv\u00e5ge us\u00e6dvanlig PowerShell-aktivitet, herunder uventede downloads eller kodede kommandoer, samt installation af nye eller uautoriserede fjernstyringsapplikationer. Denne adf\u00e6rd kan indikere, at en angriber har opn\u00e5et indledende adgang og fors\u00f8ger at etablere kontrol over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 holde \u00f8je med mist\u00e6nkelige registreringsposter, der efterligner legitim lydsoftware, fors\u00f8g p\u00e5 at aktivere Remote Desktop Protocol og eksterne Microsoft Teams-konti, der udgiver sig for at v\u00e6re interne supportmedarbejdere. Sammen kan disse indikatorer hj\u00e6lpe med at identificere social engineering og aktivitet efter kompromittering tidligt i en angrebsk\u00e6de.<\/p>\n\n\n\n

I andre sikkerhedsnyheder k\u00e6mper Microsoft med at adressere s\u00e5rbarheder<\/a> identificeret af Anthropics Claude Mythos. Efterh\u00e5nden som sikkerhedsforskning bliver mere automatiseret, kan angribere ogs\u00e5 finde og udnytte softwaresvagheder hurtigere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og implementere Chaos ransomware. Sophos sporer kampagnen som STAC4749. Sikkerhedsfirmaet observerede snesevis af fors\u00f8gte angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering. Angribere udgiver sig for IT-medarbejdere […]<\/p>\n","protected":false},"author":49,"featured_media":406,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-405","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)<\/title>\n<meta name=\"description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\" \/>\n<meta property=\"og:description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport DK (Danish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:25:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\",\"datePublished\":\"2026-07-31T08:25:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/\"},\"wordCount\":817,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/\",\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"datePublished\":\"2026-07-31T08:25:39+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\",\"name\":\"WindowsReport DK (Danish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)","description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb","og_description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","og_url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/","og_site_name":"WindowsReport DK (Danish)","article_published_time":"2026-07-31T08:25:39+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb","datePublished":"2026-07-31T08:25:39+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/"},"wordCount":817,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/","url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/","name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb - WindowsReport DK (Danish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg","datePublished":"2026-07-31T08:25:39+00:00","author":{"@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og udbrede Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#primaryimage","url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg","contentUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-1.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomwareangreb-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/dk\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos-ransomwareangreb"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/dk\/#website","url":"https:\/\/windowsreport.com\/dk\/","name":"WindowsReport DK (Danish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/dk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/dk\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/405","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/comments?post=405"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/405\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media\/406"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media?parent=405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/categories?post=405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/tags?post=405"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/work?post=405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}