{"id":411,"date":"2026-07-31T08:33:05","date_gmt":"2026-07-31T08:33:05","guid":{"rendered":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/"},"modified":"2026-07-31T08:33:05","modified_gmt":"2026-07-31T08:33:05","slug":"microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/","title":{"rendered":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb"},"content":{"rendered":"\n

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og udrulle Chaos ransomware.<\/p>\n\n\n\n

Sophos sporer kampagnen som STAC4749<\/a>. Sikkerhedsfirmaet observerede dusinvis af angrebsfors\u00f8g mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering.<\/p>\n\n\n\n

Angribere udgiver sig for at v\u00e6re IT-personale p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriberne kontaktede medarbejdere gennem eksterne Microsoft Teams-konti. Under chats og taleopkald pr\u00e6senterede de sig som helpdesk-teknikere eller medlemmer af virksomhedens IT-afdeling.<\/p>\n\n\n\n

De h\u00e6vdede derefter, at de havde brug for adgang til medarbejderens computer for at l\u00f8se et teknisk problem. Deres m\u00e5l var at overtale m\u00e5let til at godkende en fjernsupport-session uden at verificere anmodningen gennem en intern kanal.<\/p>\n\n\n\n

N\u00e5r en medarbejder accepterede anmodningen, fik angriberne direkte adgang til enheden og begyndte at installere yderligere v\u00e6rkt\u00f8jer.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Hurtig assistent i senere angreb<\/h3>\n\n\n\n

Tidlige versioner af kampagnen var st\u00e6rkt afh\u00e6ngige af Microsoft Hurtig assistent, en legitim Windows-supportfunktion, der tillader en anden person at se eller styre en computer eksternt.<\/p>\n\n\n\n

N\u00e5r Hurtig assistent var blokeret eller utilg\u00e6ngelig, instruerede angriberne ofrene i at installere anden fjernstyringssoftware. De benyttede i stigende grad den cloud-baserede RemSupp-tjeneste fra april og frem.<\/p>\n\n\n\n

Sophos mener, at RemSupp kan v\u00e6re blevet den foretrukne mulighed, fordi f\u00e6rre virksomheders blokeringslister til applikationer genkendte den. Brugen af legitim fjernsupport-software hjalp ogs\u00e5 angriberne med at undg\u00e5 at udrulle \u00e5benlyst ondsindede v\u00e6rkt\u00f8jer i angrebets f\u00f8rste fase.<\/p>\n\n\n\n

PowerShell downloader en vedvarende bagd\u00f8r<\/h3>\n\n\n\n

Efter at have opn\u00e5et fjernadgang brugte angriberne PowerShell-kommandoer til at downloade en bagd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Malwaren indsamlede oplysninger om det kompromitterede system, oprettede persistensmekanismer og opretholdt adgang, efter at den oprindelige Teams- eller fjernsupport-session sluttede.<\/p>\n\n\n\n

For at f\u00e5 aktiviteten til at fremst\u00e5 legitim oprettede angriberne registreringsdatabaseposter med navne, der lignede Windows-lydkomponenter. Observerede navne omfattede Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse poster tillod malwaren at starte automatisk, samtidig med at det blev sv\u00e6rere for medarbejdere og administratorer at identificere den mist\u00e6nkelige proces.<\/p>\n\n\n\n

Angribere installerer flere fjernadgangsv\u00e6rkt\u00f8jer<\/h3>\n\n\n\n

I h\u00e6ndelser, der udviklede sig til ransomware, installerede gruppen yderligere fjernadgangsapplikationer, herunder DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse v\u00e6rkt\u00f8jer gav backup-adgang, hvis forsvarere afbr\u00f8d den oprindelige forbindelse. Angriberne fors\u00f8gte ogs\u00e5 at aktivere Remote Desktop Protocol, hvilket kunne hj\u00e6lpe dem med at f\u00e5 adgang til andre systemer og bev\u00e6ge sig p\u00e5 tv\u00e6rs af virksomhedsnetv\u00e6rket.<\/p>\n\n\n\n

Sophos observerede gentagne \u00e6ndringer i angrebsk\u00e6den mellem februar og maj. Operat\u00f8rerne justerede deres v\u00e6rkt\u00f8jer, kommandoer og persistensmetoder, efterh\u00e5nden som sikkerhedsprodukter begyndte at opdage tidligere versioner.<\/p>\n\n\n\n

Chaos ransomware krypterede flere systemer p\u00e5 \u00e9n gang<\/h3>\n\n\n\n

Mindst tre STAC4749-angreb resulterede i udrulning af Chaos ransomware. Under disse h\u00e6ndelser krypterede ransomwaren filer p\u00e5 tv\u00e6rs af flere kompromitterede computere p\u00e5 nogenlunde samme tid.<\/p>\n\n\n\n

Beviser fra mindst \u00e9t angreb tyder p\u00e5, at gruppen muligvis har stj\u00e5let virksomhedsdata, f\u00f8r krypteringen startede. Dette ville give angriberne mulighed for at l\u00e6gge pres p\u00e5 offeret med b\u00e5de dataeksponering og systemafbrydelse.<\/p>\n\n\n\n

Sophos vurderer, at kampagnen er \u00f8konomisk motiveret. Operat\u00f8rerne kan selv udrulle ransomware eller give adgang til separate ransomware-affiliates, efter at have kompromitteret et netv\u00e6rk.<\/p>\n\n\n\n

Andre trusselsgrupper har ogs\u00e5 brugt Microsoft Teams til social engineering. Den iranske statsst\u00f8ttede MuddyWater-gruppe har brugt Teams og falsk ransomware-aktivitet til at d\u00e6kke over spionageoperationer.<\/p>\n\n\n\n

Chaos-relaterede kampagner har ogs\u00e5 brugt andre teknikker. I en separat operation brugte Chaos ransomware msaRAT til at camouflere ondsindet trafik inde i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisationer kan blokere Teams-vishing-angreb<\/h3>\n\n\n\n

Virksomheder b\u00f8r begr\u00e6nse ekstern Microsoft Teams-kommunikation eller n\u00f8je overv\u00e5ge beskeder og opkald fra konti uden for organisationen.<\/p>\n\n\n\n

Medarbejdere b\u00f8r aldrig godkende en uventet anmodning om fjernsupport uden at bekr\u00e6fte den via en officiel intern kontaktmetode. IT-afdelinger b\u00f8r ogs\u00e5 tydeligt forklare, hvilke v\u00e6rkt\u00f8jer deres teknikere bruger, og hvordan legitime supportanmodninger starter.<\/p>\n\n\n\n

Sikkerhedsteams b\u00f8r blokere eller begr\u00e6nse Hurtig assistent, RemSupp, AnyDesk, DWAgent og lignende software p\u00e5 systemer, der ikke kr\u00e6ver fjernadministration.<\/p>\n\n\n\n

Organisationer b\u00f8r overv\u00e5ge us\u00e6dvanlig PowerShell-aktivitet, herunder uventede downloads eller kodede kommandoer, samt installationen af nye eller uautoriserede fjernstyringsapplikationer. Denne adf\u00e6rd kan indikere, at en angriber har opn\u00e5et indledende adgang og fors\u00f8ger at etablere kontrol over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 holde \u00f8je med mist\u00e6nkelige registreringsdatabaseposter, der efterligner legitim lydsoftware, fors\u00f8g p\u00e5 at aktivere Remote Desktop Protocol og eksterne Microsoft Teams-konti, der udgiver sig for at v\u00e6re interne supportmedarbejdere. Sammen kan disse indikatorer hj\u00e6lpe med at identificere social engineering og aktivitet efter kompromittering tidligt i en angrebsk\u00e6de.<\/p>\n\n\n\n

I andre sikkerhedsnyheder k\u00e6mper Microsoft med at adressere s\u00e5rbarheder<\/a> identificeret af Anthropics Claude Mythos. Efterh\u00e5nden som sikkerhedsforskning bliver mere automatiseret, kan angribere ogs\u00e5 finde og udnytte softwaresvagheder hurtigere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselsakt\u00f8rer udgiver sig for at v\u00e6re virksomhedens IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang til medarbejderes enheder og udrulle Chaos ransomware. Sophos sporer kampagnen som STAC4749. Sikkerhedsfirmaet observerede dusinvis af angrebsfors\u00f8g mod organisationer i USA og Canada mellem februar og juni 2026. Mindst tre h\u00e6ndelser endte med ransomware-kryptering. Angribere udgiver sig for at v\u00e6re […]<\/p>\n","protected":false},"author":49,"featured_media":412,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb - WindowsReport DK (Danish)<\/title>\n<meta name=\"description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb\" \/>\n<meta property=\"og:description\" content=\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport DK (Danish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:33:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb\",\"datePublished\":\"2026-07-31T08:33:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/\"},\"wordCount\":821,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/\",\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb - WindowsReport DK (Danish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"datePublished\":\"2026-07-31T08:33:05+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/\",\"name\":\"WindowsReport DK (Danish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/dk\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb - WindowsReport DK (Danish)","description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb","og_description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.","og_url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/","og_site_name":"WindowsReport DK (Danish)","article_published_time":"2026-07-31T08:33:05+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb","datePublished":"2026-07-31T08:33:05+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/"},"wordCount":821,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/","url":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/","name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb - WindowsReport DK (Danish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/dk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg","datePublished":"2026-07-31T08:33:05+00:00","author":{"@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere udgiver sig for at v\u00e6re IT-supportmedarbejdere p\u00e5 Microsoft Teams for at f\u00e5 fjernadgang og sprede Chaos ransomware i virksomhedsnetv\u00e6rk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#primaryimage","url":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg","contentUrl":"https:\/\/windowsreport.com\/dk\/wp-content\/uploads\/sites\/12\/2026\/07\/teams-chaos-ransomware-4.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/dk\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angreb-3\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/dk\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos ransomware-angreb"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/dk\/#website","url":"https:\/\/windowsreport.com\/dk\/","name":"WindowsReport DK (Danish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/dk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/dk\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/dk\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/comments?post=411"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/posts\/411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media\/412"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/media?parent=411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/categories?post=411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/tags?post=411"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/dk\/wp-json\/wp\/v2\/work?post=411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}