{"id":1245,"date":"2026-07-31T08:25:53","date_gmt":"2026-07-31T08:25:53","guid":{"rendered":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/"},"modified":"2026-07-31T08:25:53","modified_gmt":"2026-07-31T08:25:53","slug":"microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/","title":{"rendered":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep"},"content":{"rendered":"\n

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell fra selskapet p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjerntilgang til ansattes enheter og distribuere Chaos-ransomware.<\/p>\n\n\n\n

Sophos f\u00f8lger kampanjen som STAC4749<\/a>. Sikkerhetsselskapet observerte dusinvis av fors\u00f8k p\u00e5 angrep mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med kryptering fra ransomware.<\/p>\n\n\n\n

Angripere utgir seg for \u00e5 v\u00e6re IT-ansatte p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriperne kontaktet ansatte via eksterne Microsoft Teams-kontoer. Under samtaler og taleanrop presenterte de seg som teknikere fra helpdesk eller medlemmer av selskapets IT-avdeling.<\/p>\n\n\n\n

De hevdet deretter at de trengte tilgang til den ansattes datamaskin for \u00e5 l\u00f8se et teknisk problem. M\u00e5let deres var \u00e5 overtale m\u00e5let til \u00e5 godkjenne en ekstern st\u00f8tte\u00f8kt uten \u00e5 bekrefte foresp\u00f8rselen via en intern kanal.<\/p>\n\n\n\n

N\u00e5r en ansatt aksepterte foresp\u00f8rselen, fikk angriperne direkte tilgang til enheten og begynte \u00e5 installere ytterligere verkt\u00f8y.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Quick Assist i senere angrep<\/h3>\n\n\n\n

Tidlige versjoner av kampanjen var sterkt avhengige av Microsoft Quick Assist, en legitim Windows-st\u00f8ttefunksjon som lar en annen person se eller kontrollere en datamaskin eksternt.<\/p>\n\n\n\n

N\u00e5r Quick Assist var blokkert eller utilgjengelig, instruerte angriperne ofrene til \u00e5 installere annen programvare for fjernadministrasjon. Fra og med april stolte de i \u00f8kende grad p\u00e5 den skybaserte RemSupp-tjenesten.<\/p>\n\n\n\n

Sophos antar at RemSupp kan ha blitt det foretrukne alternativet fordi f\u00e6rre bedrifters programvareblokkeringslister gjenkjente den. Bruk av legitim programvare for ekstern st\u00f8tte hjalp ogs\u00e5 angriperne med \u00e5 unng\u00e5 \u00e5 distribuere \u00e5penbart skadelige verkt\u00f8y i den f\u00f8rste fasen av angrepet.<\/p>\n\n\n\n

PowerShell laster ned en vedvarende bakd\u00f8r<\/h3>\n\n\n\n

Etter \u00e5 ha f\u00e5tt fjerntilgang, brukte angriperne PowerShell-kommandoer for \u00e5 laste ned en bakd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Skadevaren samlet informasjon om det kompromitterte systemet, opprettet mekanismer for vedvarende tilgang og opprettholdt tilgang etter at den opprinnelige Teams- eller eksterne st\u00f8tte\u00f8kten ble avsluttet.<\/p>\n\n\n\n

For \u00e5 f\u00e5 aktiviteten til \u00e5 fremst\u00e5 som legitim opprettet angriperne registern\u00f8kler med navn som lignet p\u00e5 Windows lydkomponenter. Observerte navn inkluderte Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse oppf\u00f8ringene tillot skadevaren \u00e5 starte automatisk samtidig som de gjorde det vanskeligere for ansatte og administratorer \u00e5 identifisere den mistenkelige prosessen.<\/p>\n\n\n\n

Angripere installerer flere verkt\u00f8y for fjerntilgang<\/h3>\n\n\n\n

I hendelser som utviklet seg til ransomware, installerte gruppen ytterligere applikasjoner for fjerntilgang, inkludert DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse verkt\u00f8yene ga reservetilgang hvis forsvarerne avbr\u00f8t den opprinnelige forbindelsen. Angriperne pr\u00f8vde ogs\u00e5 \u00e5 aktivere Remote Desktop Protocol, noe som kunne hjelpe dem med \u00e5 f\u00e5 tilgang til andre systemer og bevege seg p\u00e5 tvers av bedriftsnettverket.<\/p>\n\n\n\n

Sophos observerte gjentatte endringer i angrepskjeden mellom februar og mai. Operat\u00f8rene justerte verkt\u00f8yene, kommandoene og metodene for vedvarende tilgang etter hvert som sikkerhetsproduktene begynte \u00e5 oppdage tidligere versjoner.<\/p>\n\n\n\n

Chaos-ransomware krypterte flere systemer samtidig<\/h3>\n\n\n\n

Minst tre STAC4749-angrep resulterte i distribuering av Chaos-ransomware. Under disse hendelsene krypterte ransomware filer p\u00e5 tvers av flere kompromitterte datamaskiner omtrent samtidig.<\/p>\n\n\n\n

Bevis fra minst ett angrep tyder p\u00e5 at gruppen kan ha stj\u00e5let bedriftsdata f\u00f8r de startet kryptering. Dette ville tillate angriperne \u00e5 presse offeret med b\u00e5de dataeksponering og systemforstyrrelse.<\/p>\n\n\n\n

Sophos vurderer kampanjen som \u00f8konomisk motivert. Operat\u00f8rene kan distribuere ransomware selv eller gi tilgang til separate ransomware-tilknyttede akt\u00f8rer etter \u00e5 ha kompromittert et nettverk.<\/p>\n\n\n\n

Andre trusselgrupper har ogs\u00e5 brukt Microsoft Teams til sosial manipulasjon. Den iransk-statsst\u00f8ttede MuddyWater-gruppen har brukt Teams og falsk ransomware-aktivitet for \u00e5 skjule spionasjeoperasjoner.<\/p>\n\n\n\n

Chaos-relaterte kampanjer har ogs\u00e5 brukt andre teknikker. I en separat operasjon brukte Chaos-ransomware msaRAT for \u00e5 skjule ondsinnet trafikk inne i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisasjoner kan blokkere Teams-vishingangrep<\/h3>\n\n\n\n

Selskaper b\u00f8r begrense ekstern Microsoft Teams-kommunikasjon eller n\u00f8ye overv\u00e5ke meldinger og anrop fra kontoer utenfor organisasjonen.<\/p>\n\n\n\n

Ansatte b\u00f8r aldri godkjenne en uventet foresp\u00f8rsel om ekstern st\u00f8tte uten \u00e5 bekrefte den via en offisiell intern kontaktmetode. IT-avdelinger b\u00f8r ogs\u00e5 tydelig forklare hvilke verkt\u00f8y teknikerne deres bruker og hvordan legitime st\u00f8tteforesp\u00f8rsler starter.<\/p>\n\n\n\n

Sikkerhetsteam b\u00f8r blokkere eller begrense Quick Assist, RemSupp, AnyDesk, DWAgent og lignende programvare p\u00e5 systemer som ikke krever fjernadministrasjon.<\/p>\n\n\n\n

Organisasjoner b\u00f8r overv\u00e5ke uvanlig PowerShell-aktivitet, inkludert uventede nedlastinger eller kodede kommandoer, samt installasjon av nye eller uautoriserte applikasjoner for fjernadministrasjon. Slik atferd kan indikere at en angriper har f\u00e5tt innledende tilgang og fors\u00f8ker \u00e5 etablere kontroll over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 se etter mistenkelige registern\u00f8kler som etterligner legitim lydprogramvare, fors\u00f8k p\u00e5 \u00e5 aktivere Remote Desktop Protocol, og eksterne Microsoft Teams-kontoer som utgir seg for \u00e5 v\u00e6re internt st\u00f8ttepersonell. Til sammen kan disse indikatorene bidra til \u00e5 identifisere sosial manipulasjon og aktivitet etter kompromittering tidlig i en angrepskjede.<\/p>\n\n\n\n

I andre sikkerhetsnyheter, sliter Microsoft med \u00e5 adressere s\u00e5rbarheter<\/a> identifisert av Anthropics Claude Mythos. Etter hvert som sikkerhetsforskning blir mer automatisert, kan angripere ogs\u00e5 raskere finne og utnytte programvaresvakheter.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell fra selskapet p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjerntilgang til ansattes enheter og distribuere Chaos-ransomware. Sophos f\u00f8lger kampanjen som STAC4749. Sikkerhetsselskapet observerte dusinvis av fors\u00f8k p\u00e5 angrep mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med kryptering fra ransomware. Angripere utgir […]<\/p>\n","protected":false},"author":49,"featured_media":1246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-1245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)<\/title>\n<meta name=\"description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep\" \/>\n<meta property=\"og:description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport NO (Norwegen)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:25:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep\",\"datePublished\":\"2026-07-31T08:25:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/\"},\"wordCount\":792,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/\",\"name\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"datePublished\":\"2026-07-31T08:25:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\",\"name\":\"WindowsReport NO (Norwegen)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)","description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep","og_description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.","og_url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/","og_site_name":"WindowsReport NO (Norwegen)","article_published_time":"2026-07-31T08:25:53+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep","datePublished":"2026-07-31T08:25:53+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/"},"wordCount":792,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/","url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/","name":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg","datePublished":"2026-07-31T08:25:53+00:00","author":{"@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang og spre Chaos ransomware over bedriftsnettverk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#primaryimage","url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg","contentUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomwareangrep\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/no\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/no\/#website","url":"https:\/\/windowsreport.com\/no\/","name":"WindowsReport NO (Norwegen)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/no\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/no\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/comments?post=1245"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1245\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media\/1246"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media?parent=1245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/categories?post=1245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/tags?post=1245"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/work?post=1245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}