{"id":1247,"date":"2026-07-31T08:27:21","date_gmt":"2026-07-31T08:27:21","guid":{"rendered":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/"},"modified":"2026-07-31T08:27:21","modified_gmt":"2026-07-31T08:27:21","slug":"microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/","title":{"rendered":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep"},"content":{"rendered":"\n

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-supportmedarbeidere p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll over ansattes enheter og distribuere Chaos-ransomware.<\/p>\n\n\n\n

Sophos sporer kampanjen som STAC4749<\/a>. Sikkerhetsselskapet observerte dusinvis av angrepsfors\u00f8k mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med kryptering fra ransomware.<\/p>\n\n\n\n

Angripere utgir seg for \u00e5 v\u00e6re IT-ansatte p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriperne tok kontakt med ansatte via eksterne Microsoft Teams-kontoer. Under chatter og taleanrop presenterte de seg som supportteknikere eller medlemmer av selskapets IT-avdeling.<\/p>\n\n\n\n

De hevdet deretter at de trengte tilgang til den ansattes datamaskin for \u00e5 l\u00f8se et teknisk problem. M\u00e5let var \u00e5 overtale m\u00e5let til \u00e5 godkjenne en ekstern st\u00f8tte\u00f8kt uten \u00e5 bekrefte foresp\u00f8rselen via en intern kanal.<\/p>\n\n\n\n

N\u00e5r en ansatt aksepterte foresp\u00f8rselen, fikk angriperne direkte tilgang til enheten og begynte \u00e5 installere flere verkt\u00f8y.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Quick Assist i senere angrep<\/h3>\n\n\n\n

Tidlige versjoner av kampanjen stolte tungt p\u00e5 Microsoft Quick Assist, en legitim Windows-st\u00f8ttefunksjon som lar en annen person se eller styre en datamaskin eksternt.<\/p>\n\n\n\n

Da Quick Assist var blokkert eller utilgjengelig, instruerte angriperne ofre om \u00e5 installere annen programvare for ekstern administrasjon. De stolte i \u00f8kende grad p\u00e5 den skybaserte tjenesten RemSupp fra april og utover.<\/p>\n\n\n\n

Sophos mener RemSupp kan ha blitt det foretrukne alternativet fordi f\u00e6rre blokkeringslister for apper i bedrifter gjenkjente det. \u00c5 bruke legitim programvare for ekstern st\u00f8tte hjalp ogs\u00e5 angriperne med \u00e5 unng\u00e5 \u00e5 distribuere \u00e5penbart skadelige verkt\u00f8y i den f\u00f8rste fasen av angrepet.<\/p>\n\n\n\n

PowerShell laster ned en vedvarende bakd\u00f8r<\/h3>\n\n\n\n

Etter \u00e5 ha f\u00e5tt fjernkontroll, brukte angriperne PowerShell-kommandoer for \u00e5 laste ned en bakd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Skadevaren samlet informasjon om det kompromitterte systemet, opprettet utholdenhetsmekanismer og opprettholdt tilgang etter at den opprinnelige Teams- eller eksterne st\u00f8tte\u00f8kten var avsluttet.<\/p>\n\n\n\n

For \u00e5 f\u00e5 aktiviteten til \u00e5 virke legitim, opprettet angriperne registeroppf\u00f8ringer med navn som lignet p\u00e5 Windows-lydkomponenter. Observerte navn inkluderte Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse oppf\u00f8ringene lot skadevaren starte automatisk samtidig som de gjorde det vanskeligere for ansatte og administratorer \u00e5 identifisere den mistenkelige prosessen.<\/p>\n\n\n\n

Angripere installerer flere verkt\u00f8y for ekstern tilgang<\/h3>\n\n\n\n

I hendelser som utviklet seg til ransomware, installerte gruppen ytterligere applikasjoner for ekstern tilgang, inkludert DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse verkt\u00f8yene ga reservetilgang hvis forsvarere avbr\u00f8t den opprinnelige tilkoblingen. Angriperne pr\u00f8vde ogs\u00e5 \u00e5 aktivere Remote Desktop Protocol, noe som kunne hjelpe dem med \u00e5 f\u00e5 tilgang til andre systemer og bevege seg p\u00e5 tvers av bedriftsnettverket.<\/p>\n\n\n\n

Sophos observerte gjentatte endringer i angrepskjeden mellom februar og mai. Akt\u00f8rene justerte verkt\u00f8yene, kommandoene og utholdenhetsmetodene sine etter hvert som sikkerhetsprodukter begynte \u00e5 oppdage tidligere versjoner.<\/p>\n\n\n\n

Chaos-ransomware krypterte flere systemer samtidig<\/h3>\n\n\n\n

Minst tre STAC4749-angrep resulterte i distribusjon av Chaos-ransomware. Under disse hendelsene krypterte l\u00f8sepengeviruset filer p\u00e5 tvers av flere kompromitterte datamaskiner omtrent samtidig.<\/p>\n\n\n\n

Bevis fra minst ett angrep tyder p\u00e5 at gruppen kan ha stj\u00e5let bedriftsdata f\u00f8r de startet kryptering. Dette ville tillate angriperne \u00e5 presse offeret med b\u00e5de dataeksponering og systemforstyrrelse.<\/p>\n\n\n\n

Sophos vurderer kampanjen som \u00f8konomisk motivert. Operat\u00f8rene kan distribuere ransomware selv eller gi tilgang til separate ransomware-tilknyttede selskaper etter \u00e5 ha kompromittert et nettverk.<\/p>\n\n\n\n

Andre trusselgrupper har ogs\u00e5 brukt Microsoft Teams til sosial manipulering. Den iranske statsst\u00f8ttede MuddyWater-gruppen har brukt Teams og falsk ransomware-aktivitet for \u00e5 skjule spionasjeoperasjoner.<\/p>\n\n\n\n

Chaos-relaterte kampanjer har ogs\u00e5 brukt andre teknikker. I en separat operasjon brukte Chaos-ransomware msaRAT for \u00e5 skjule skadelig trafikk inne i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisasjoner kan blokkere Teams-vishing-angrep<\/h3>\n\n\n\n

Selskaper b\u00f8r begrense ekstern Microsoft Teams-kommunikasjon eller n\u00f8ye overv\u00e5ke meldinger og anrop fra kontoer utenfor organisasjonen.<\/p>\n\n\n\n

Ansatte b\u00f8r aldri godkjenne en uventet foresp\u00f8rsel om ekstern st\u00f8tte uten \u00e5 bekrefte den via en offisiell intern kontaktmetode. IT-avdelinger b\u00f8r ogs\u00e5 tydelig forklare hvilke verkt\u00f8y deres teknikere bruker, og hvordan legitime st\u00f8tteforesp\u00f8rsler starter.<\/p>\n\n\n\n

Sikkerhetsteam b\u00f8r blokkere eller begrense Quick Assist, RemSupp, AnyDesk, DWAgent og lignende programvare p\u00e5 systemer som ikke krever ekstern administrasjon.<\/p>\n\n\n\n

Organisasjoner b\u00f8r overv\u00e5ke uvanlig PowerShell-aktivitet, inkludert uventede nedlastinger eller kodede kommandoer, samt installasjon av nye eller uautoriserte applikasjoner for ekstern administrasjon. Denne atferden kan indikere at en angriper har f\u00e5tt innledende tilgang og pr\u00f8ver \u00e5 etablere kontroll over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 se etter mistenkelige registeroppf\u00f8ringer som etterligner legitim lydprogramvare, fors\u00f8k p\u00e5 \u00e5 aktivere Remote Desktop Protocol, og eksterne Microsoft Teams-kontoer som utgir seg for \u00e5 v\u00e6re internt supportpersonell. Sammen kan disse indikatorene bidra til \u00e5 identifisere sosial manipulering og aktivitet etter kompromittering tidlig i en angrepskjede.<\/p>\n\n\n\n

I andre sikkerhetsnyheter sliter Microsoft med \u00e5 h\u00e5ndtere s\u00e5rbarheter<\/a> identifisert av Anthropics Claude Mythos. Etter hvert som sikkerhetsforskning blir mer automatisert, kan angripere ogs\u00e5 finne og utnytte programvaresvakheter raskere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-supportmedarbeidere p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll over ansattes enheter og distribuere Chaos-ransomware. Sophos sporer kampanjen som STAC4749. Sikkerhetsselskapet observerte dusinvis av angrepsfors\u00f8k mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med kryptering fra ransomware. Angripere utgir seg for \u00e5 v\u00e6re […]<\/p>\n","protected":false},"author":49,"featured_media":1248,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-1247","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)<\/title>\n<meta name=\"description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep\" \/>\n<meta property=\"og:description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport NO (Norwegen)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:27:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep\",\"datePublished\":\"2026-07-31T08:27:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/\"},\"wordCount\":784,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/\",\"name\":\"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"datePublished\":\"2026-07-31T08:27:21+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\",\"name\":\"WindowsReport NO (Norwegen)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)","description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep","og_description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk","og_url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/","og_site_name":"WindowsReport NO (Norwegen)","article_published_time":"2026-07-31T08:27:21+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep","datePublished":"2026-07-31T08:27:21+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/"},"wordCount":784,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/","url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/","name":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg","datePublished":"2026-07-31T08:27:21+00:00","author":{"@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonale p\u00e5 Microsoft Teams for \u00e5 skaffe seg ekstern tilgang og spre Chaos ransomware i bedriftsnettverk","breadcrumb":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#primaryimage","url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg","contentUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-1.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stotte-svindel-forer-til-chaos-ransomware-angrep\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/no\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-st\u00f8tte-svindel f\u00f8rer til Chaos Ransomware-angrep"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/no\/#website","url":"https:\/\/windowsreport.com\/no\/","name":"WindowsReport NO (Norwegen)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/no\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/no\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/comments?post=1247"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1247\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media\/1248"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media?parent=1247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/categories?post=1247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/tags?post=1247"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/work?post=1247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}