{"id":1254,"date":"2026-07-31T08:35:11","date_gmt":"2026-07-31T08:35:11","guid":{"rendered":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/"},"modified":"2026-07-31T08:35:11","modified_gmt":"2026-07-31T08:35:11","slug":"microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/","title":{"rendered":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep"},"content":{"rendered":"\n

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-brukerst\u00f8tteansatte p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjerntilgang til ansattes enheter og utplassere Chaos-ransomware.<\/p>\n\n\n\n

Sophos f\u00f8lger kampanjen som STAC4749<\/a>. Sikkerhetsselskapet observerte dusinvis av angrepsfors\u00f8k mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med ransomware-kryptering.<\/p>\n\n\n\n

Angripere utgir seg for \u00e5 v\u00e6re IT-ansatte p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriperne kontaktet ansatte gjennom eksterne Microsoft Teams-kontoer. Under samtaler og taleanrop presenterte de seg som brukerst\u00f8tteteknikere eller medlemmer av selskapets IT-avdeling.<\/p>\n\n\n\n

De hevdet deretter at de trengte tilgang til den ansattes datamaskin for \u00e5 l\u00f8se et teknisk problem. M\u00e5let deres var \u00e5 overtale m\u00e5let til \u00e5 godkjenne en ekstern st\u00f8tte\u00f8kt uten \u00e5 verifisere foresp\u00f8rselen gjennom en intern kanal.<\/p>\n\n\n\n

N\u00e5r en ansatt godtok foresp\u00f8rselen, fikk angriperne direkte tilgang til enheten og begynte \u00e5 installere flere verkt\u00f8y.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Hurtighjelp i senere angrep<\/h3>\n\n\n\n

Tidlige versjoner av kampanjen var sterkt avhengige av Microsoft Hurtighjelp, en legitim Windows-st\u00f8ttefunksjon som lar en annen person se p\u00e5 eller kontrollere en datamaskin eksternt.<\/p>\n\n\n\n

N\u00e5r Hurtighjelp var blokkert eller utilgjengelig, instruerte angriperne ofrene om \u00e5 installere annen programvare for ekstern administrasjon. De stolte i \u00f8kende grad p\u00e5 den skybaserte RemSupp-tjenesten fra april og utover.<\/p>\n\n\n\n

Sophos mener at RemSupp kan ha blitt det foretrukne alternativet fordi f\u00e6rre bedriftsblokkeringslister for applikasjoner gjenkjente det. Bruk av legitim programvare for ekstern st\u00f8tte hjalp ogs\u00e5 angriperne med \u00e5 unng\u00e5 \u00e5 utplassere \u00e5penbart ondsinnede verkt\u00f8y under den f\u00f8rste fasen av angrepet.<\/p>\n\n\n\n

PowerShell laster ned en vedvarende bakd\u00f8r<\/h3>\n\n\n\n

Etter \u00e5 ha f\u00e5tt fjerntilgang, brukte angriperne PowerShell-kommandoer til \u00e5 laste ned en bakd\u00f8r i offerets %AppData%-mappe.<\/p>\n\n\n\n

Skadevaren samlet inn informasjon om det kompromitterte systemet, opprettet persistensmekanismer og opprettholdt tilgang etter at den opprinnelige Teams- eller eksterne st\u00f8tte\u00f8kten var avsluttet.<\/p>\n\n\n\n

For \u00e5 f\u00e5 aktiviteten til \u00e5 virke legitim, opprettet angriperne registeroppf\u00f8ringer med navn som lignet p\u00e5 Windows-lydkomponenter. Observerte navn inkluderte Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse oppf\u00f8ringene lot skadevaren starte automatisk, samtidig som det ble vanskeligere for ansatte og administratorer \u00e5 identifisere den mistenkelige prosessen.<\/p>\n\n\n\n

Angripere installerer flere verkt\u00f8y for fjerntilgang<\/h3>\n\n\n\n

I hendelser som utviklet seg til ransomware, installerte gruppen flere eksterne tilgangsapplikasjoner, inkludert DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse verkt\u00f8yene ga reservetilgang hvis forsvarere avbr\u00f8t den opprinnelige tilkoblingen. Angriperne fors\u00f8kte ogs\u00e5 \u00e5 aktivere Remote Desktop Protocol, noe som kunne hjelpe dem med \u00e5 f\u00e5 tilgang til andre systemer og bevege seg p\u00e5 tvers av bedriftsnettverket.<\/p>\n\n\n\n

Sophos observerte gjentatte endringer i angrepskjeden mellom februar og mai. Operat\u00f8rene justerte verkt\u00f8yene, kommandoene og persistensmetodene sine etter hvert som sikkerhetsprodukter begynte \u00e5 oppdage tidligere versjoner.<\/p>\n\n\n\n

Chaos-ransomware krypterte flere systemer samtidig<\/h3>\n\n\n\n

Minst tre STAC4749-angrep resulterte i utplassering av Chaos-ransomware. Under disse hendelsene krypterte ransomwaren filer p\u00e5 tvers av flere kompromitterte datamaskiner omtrent samtidig.<\/p>\n\n\n\n

Bevis fra minst ett angrep tyder p\u00e5 at gruppen kan ha stj\u00e5let bedriftsdata f\u00f8r de startet kryptering. Dette ville tillate angriperne \u00e5 presse offeret med b\u00e5de dataeksponering og systemforstyrrelse.<\/p>\n\n\n\n

Sophos vurderer kampanjen som \u00f8konomisk motivert. Operat\u00f8rene kan utplassere ransomware selv eller gi tilgang til separate ransomware-tilknyttede akt\u00f8rer etter \u00e5 ha kompromittert et nettverk.<\/p>\n\n\n\n

Andre trusselgrupper har ogs\u00e5 brukt Microsoft Teams til sosial manipulering. Den iranske statsst\u00f8ttede MuddyWater-gruppen har brukt Teams og falsk ransomware-aktivitet for \u00e5 skjule spionasjeoperasjoner.<\/p>\n\n\n\n

Chaos-relaterte kampanjer har ogs\u00e5 brukt andre teknikker. I en separat operasjon brukte Chaos-ransomware msaRAT for \u00e5 skjule ondsinnet trafikk i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisasjoner kan blokkere Teams-vishing-angrep<\/h3>\n\n\n\n

Selskaper b\u00f8r begrense ekstern Microsoft Teams-kommunikasjon eller n\u00f8ye overv\u00e5ke meldinger og samtaler fra kontoer utenfor organisasjonen.<\/p>\n\n\n\n

Ansatte b\u00f8r aldri godkjenne en uventet foresp\u00f8rsel om ekstern st\u00f8tte uten \u00e5 bekrefte den gjennom en offisiell intern kontaktmetode. IT-avdelinger b\u00f8r ogs\u00e5 tydelig forklare hvilke verkt\u00f8y teknikerne deres bruker, og hvordan legitime st\u00f8tteforesp\u00f8rsler starter.<\/p>\n\n\n\n

Sikkerhetsteam b\u00f8r blokkere eller begrense Hurtighjelp, RemSupp, AnyDesk, DWAgent og lignende programvare p\u00e5 systemer som ikke krever ekstern administrasjon.<\/p>\n\n\n\n

Organisasjoner b\u00f8r overv\u00e5ke uvanlig PowerShell-aktivitet, inkludert uventede nedlastinger eller kodede kommandoer, samt installasjon av nye eller uautoriserte applikasjoner for ekstern administrasjon. Denne atferden kan indikere at en angriper har f\u00e5tt innledende tilgang og fors\u00f8ker \u00e5 etablere kontroll over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 overv\u00e5ke mistenkelige registeroppf\u00f8ringer som etterligner legitim lydprogramvare, fors\u00f8k p\u00e5 \u00e5 aktivere Remote Desktop Protocol og eksterne Microsoft Teams-kontoer som utgir seg for \u00e5 v\u00e6re internt st\u00f8ttepersonell. Sammen kan disse indikatorene bidra til \u00e5 identifisere sosial manipulering og aktivitet etter kompromittering tidlig i en angrepskjede.<\/p>\n\n\n\n

I andre sikkerhetsnyheter strever Microsoft med \u00e5 adressere s\u00e5rbarheter<\/a> identifisert av Anthropics Claude Mythos. Etter hvert som sikkerhetsforskning blir mer automatisert, kan ogs\u00e5 angripere finne og utnytte programvaresvakheter raskere.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re IT-brukerst\u00f8tteansatte p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjerntilgang til ansattes enheter og utplassere Chaos-ransomware. Sophos f\u00f8lger kampanjen som STAC4749. Sikkerhetsselskapet observerte dusinvis av angrepsfors\u00f8k mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med ransomware-kryptering. Angripere utgir seg for \u00e5 v\u00e6re IT-ansatte p\u00e5 […]<\/p>\n","protected":false},"author":49,"featured_media":1255,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-1254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)<\/title>\n<meta name=\"description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep\" \/>\n<meta property=\"og:description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport NO (Norwegen)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:35:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep\",\"datePublished\":\"2026-07-31T08:35:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/\"},\"wordCount\":777,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/\",\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"datePublished\":\"2026-07-31T08:35:11+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-4.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\",\"name\":\"WindowsReport NO (Norwegen)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)","description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep","og_description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","og_url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/","og_site_name":"WindowsReport NO (Norwegen)","article_published_time":"2026-07-31T08:35:11+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep","datePublished":"2026-07-31T08:35:11+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/"},"wordCount":777,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/","url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/","name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep - WindowsReport NO (Norwegen)","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg","datePublished":"2026-07-31T08:35:11+00:00","author":{"@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere utgir seg for \u00e5 v\u00e6re IT-st\u00f8ttepersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernadgang og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage","url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg","contentUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-4.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-support-svindel-forer-til-chaos-ransomware-angrep-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/no\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-support-svindel f\u00f8rer til Chaos Ransomware-angrep"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/no\/#website","url":"https:\/\/windowsreport.com\/no\/","name":"WindowsReport NO (Norwegen)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/no\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/no\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/comments?post=1254"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1254\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media\/1255"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media?parent=1254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/categories?post=1254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/tags?post=1254"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/work?post=1254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}