{"id":409,"date":"2026-07-31T08:26:38","date_gmt":"2026-07-31T08:26:38","guid":{"rendered":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/"},"modified":"2026-07-31T08:26:38","modified_gmt":"2026-07-31T08:26:38","slug":"microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/","title":{"rendered":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb"},"content":{"rendered":"\n

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomheds-it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejdernes enheder og udrulle Chaos ransomware.<\/p>\n\n\n\n

Sophos sporer kampagnen som STAC4749<\/a>. Sikkerhedsfirmaet observerede dusinvis af fors\u00f8g p\u00e5 angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering.<\/p>\n\n\n\n

Angribere udgiver sig for at v\u00e6re it-personale p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriberne kontaktede medarbejdere via eksterne Microsoft Teams-konti. Under chats og taleopkald pr\u00e6senterede de sig som helpdesk-teknikere eller medlemmer af virksomhedens it-afdeling.<\/p>\n\n\n\n

De h\u00e6vdede derefter, at de havde brug for adgang til medarbejderens computer for at l\u00f8se et teknisk problem. Deres m\u00e5l var at overtale m\u00e5let til at godkende en remote support-session uden at verificere anmodningen via en intern kanal.<\/p>\n\n\n\n

N\u00e5r en medarbejder accepterede anmodningen, fik angriberne direkte adgang til enheden og begyndte at installere yderligere v\u00e6rkt\u00f8jer.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Quick Assist i senere angreb<\/h3>\n\n\n\n

Tidlige versioner af kampagnen var st\u00e6rkt afh\u00e6ngige af Microsoft Quick Assist, en legitim Windows-supportfunktion, der giver en anden person mulighed for at se eller styre en computer eksternt.<\/p>\n\n\n\n

N\u00e5r Quick Assist var blokeret eller utilg\u00e6ngelig, instruerede angriberne ofrene i at installere anden remote management-software. De st\u00f8ttede sig i stigende grad p\u00e5 den cloudbaserede RemSupp-tjeneste fra april og frem.<\/p>\n\n\n\n

Sophos mener, at RemSupp kan v\u00e6re blevet det foretrukne valg, fordi f\u00e6rre virksomheds-applikationsbloklister genkendte det. Brugen af legitim remote support-software hjalp ogs\u00e5 angriberne med at undg\u00e5 at implementere \u00e5benlyst ondsindede v\u00e6rkt\u00f8jer i den f\u00f8rste fase af angrebet.<\/p>\n\n\n\n

PowerShell downloader en vedvarende bagd\u00f8r<\/h3>\n\n\n\n

Efter at have opn\u00e5et fjernadgang brugte angriberne PowerShell-kommandoer til at downloade en bagd\u00f8r til ofrets %AppData%-mappe.<\/p>\n\n\n\n

Malwaren indsamlede oplysninger om det kompromitterede system, oprettede persistensmekanismer og opretholdt adgang, efter at den oprindelige Teams- eller remote support-session sluttede.<\/p>\n\n\n\n

For at f\u00e5 aktiviteten til at se legitim ud oprettede angriberne registreringsdatabaseposter med navne, der lignede Windows-lydkomponenter. Observerede navne omfattede Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse poster gjorde det muligt for malwaren at starte automatisk, samtidig med at det blev sv\u00e6rere for medarbejdere og administratorer at identificere den mist\u00e6nkelige proces.<\/p>\n\n\n\n

Angriberne installerer flere remote access-v\u00e6rkt\u00f8jer<\/h3>\n\n\n\n

I incidenter, der udviklede sig til ransomware, installerede gruppen yderligere remote access-applikationer, herunder DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse v\u00e6rkt\u00f8jer gav backup-adgang, hvis forsvarerne afbr\u00f8d den oprindelige forbindelse. Angriberne fors\u00f8gte ogs\u00e5 at aktivere Remote Desktop Protocol, hvilket kunne hj\u00e6lpe dem med at f\u00e5 adgang til andre systemer og bev\u00e6ge sig p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rket.<\/p>\n\n\n\n

Sophos observerede gentagne \u00e6ndringer af angrebsk\u00e6den mellem februar og maj. Operat\u00f8rerne justerede deres v\u00e6rkt\u00f8jer, kommandoer og persistensmetoder, efterh\u00e5nden som sikkerhedsprodukter begyndte at opdage tidligere versioner.<\/p>\n\n\n\n

Chaos ransomware krypterede flere systemer p\u00e5 \u00e9n gang<\/h3>\n\n\n\n

Mindst tre STAC4749-angreb resulterede i implementering af Chaos ransomware. Under disse incidenter krypterede ransomwaren filer p\u00e5 tv\u00e6rs af flere kompromitterede computere p\u00e5 omtrent samme tid.<\/p>\n\n\n\n

Beviser fra mindst \u00e9t angreb tyder p\u00e5, at gruppen kan have stj\u00e5let virksomhedsdata, f\u00f8r krypteringen startede. Dette ville give angriberne mulighed for at l\u00e6gge pres p\u00e5 offeret med b\u00e5de dataeksponering og systemafbrydelse.<\/p>\n\n\n\n

Sophos vurderer, at kampagnen er \u00f8konomisk motiveret. Operat\u00f8rerne kan selv udrulle ransomware eller give adgang til separate ransomware-affiliates efter at have kompromitteret et netv\u00e6rk.<\/p>\n\n\n\n

Andre trusselsgrupper har ogs\u00e5 brugt Microsoft Teams til social engineering. Den iranske statsst\u00f8ttede MuddyWater-gruppe har brugt Teams og falsk ransomware-aktivitet til at skjule spionageoperationer.<\/p>\n\n\n\n

Chaos-relaterede kampagner har ogs\u00e5 brugt andre teknikker. I en separat operation brugte Chaos ransomware msaRAT til at skjule ondsindet trafik i Chrome og Edge.<\/p>\n\n\n\n

S\u00e5dan kan organisationer blokere Teams-vishing-angreb<\/h3>\n\n\n\n

Virksomheder b\u00f8r begr\u00e6nse eksterne Microsoft Teams-kommunikationer eller n\u00f8je overv\u00e5ge beskeder og opkald fra konti uden for organisationen.<\/p>\n\n\n\n

Medarbejdere b\u00f8r aldrig godkende en uventet remote support-anmodning uden at bekr\u00e6fte den via en officiel intern kontaktmetode. It-afdelinger b\u00f8r ogs\u00e5 klart forklare, hvilke v\u00e6rkt\u00f8jer deres teknikere bruger, og hvordan legitime supportanmodninger indledes.<\/p>\n\n\n\n

Sikkerhedsteams b\u00f8r blokere eller begr\u00e6nse Quick Assist, RemSupp, AnyDesk, DWAgent og lignende software p\u00e5 systemer, der ikke kr\u00e6ver remote administration.<\/p>\n\n\n\n

Organisationer b\u00f8r overv\u00e5ge us\u00e6dvanlig PowerShell-aktivitet, herunder uventede downloads eller kodede kommandoer, samt installation af nye eller uautoriserede remote management-applikationer. Denne adf\u00e6rd kan indikere, at en angriber har opn\u00e5et indledende adgang og fors\u00f8ger at etablere kontrol over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 holde \u00f8je med mist\u00e6nkelige registreringsdatabaseposter, der efterligner legitim lydsoftware, fors\u00f8g p\u00e5 at aktivere Remote Desktop Protocol og eksterne Microsoft Teams-konti, der udgiver sig for at v\u00e6re internt supportpersonale. Tilsammen kan disse indikatorer hj\u00e6lpe med at identificere social engineering og aktivitet efter kompromittering tidligt i en angrebsk\u00e6de.<\/p>\n\n\n\n

I andre sikkerhedsnyheder k\u00e6mper Microsoft med at rette op p\u00e5 s\u00e5rbarheder<\/a> identificeret af Anthropics Claude Mythos. Efterh\u00e5nden som sikkerhedsforskning bliver mere automatiseret, kan angribere ogs\u00e5 finde og udnytte softwaresvagheder hurtigere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomheds-it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejdernes enheder og udrulle Chaos ransomware. Sophos sporer kampagnen som STAC4749. Sikkerhedsfirmaet observerede dusinvis af fors\u00f8g p\u00e5 angreb mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering. Angribere udgiver sig for at […]<\/p>\n","protected":false},"author":49,"featured_media":410,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-409","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb - WindowsReport DK (Danish)<\/title>\n<meta name=\"description\" content=\"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb\" \/>\n<meta property=\"og:description\" content=\"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport DK (Danish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:26:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb\",\"datePublished\":\"2026-07-31T08:26:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/\"},\"wordCount\":835,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-3.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/\",\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb - WindowsReport DK (Danish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-3.jpg\",\"datePublished\":\"2026-07-31T08:26:38+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-3.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-3.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\",\"name\":\"WindowsReport DK (Danish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb - WindowsReport DK (Danish)","description":"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb","og_description":"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","og_url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/","og_site_name":"WindowsReport DK (Danish)","article_published_time":"2026-07-31T08:26:38+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb","datePublished":"2026-07-31T08:26:38+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/"},"wordCount":835,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/","url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/","name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb - WindowsReport DK (Danish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg","datePublished":"2026-07-31T08:26:38+00:00","author":{"@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere udgiver sig for at v\u00e6re it-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#primaryimage","url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg","contentUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-3.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/dk\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angreb"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/dk\/#website","url":"https:\/\/windowsreport.com\/dk\/","name":"WindowsReport DK (Danish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/dk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/dk\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/comments?post=409"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/409\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media\/410"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media?parent=409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/categories?post=409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/tags?post=409"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/work?post=409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}