{"id":1256,"date":"2026-07-31T08:35:13","date_gmt":"2026-07-31T08:35:13","guid":{"rendered":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/"},"modified":"2026-07-31T08:38:12","modified_gmt":"2026-07-31T08:38:12","slug":"microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/","title":{"rendered":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep"},"content":{"rendered":"\n

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re bedriftens IT-supportmedarbeidere p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang til ansattes enheter og distribuere Chaos ransomware.<\/p>\n\n\n\n

Sophos sporer kampanjen som STAC4749<\/a>. Sikkerhetsselskapet observerte dusinvis av fors\u00f8k p\u00e5 angrep mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med l\u00f8sepengevirus-kryptering.<\/p>\n\n\n\n

Angripere utgir seg for IT-personell p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriperne kontaktet ansatte via eksterne Microsoft Teams-kontoer. Under chat- og talesamtaler presenterte de seg som serviceteknikere eller medlemmer av bedriftens IT-avdeling.<\/p>\n\n\n\n

De hevdet deretter at de trengte tilgang til den ansattes datamaskin for \u00e5 l\u00f8se et teknisk problem. M\u00e5let deres var \u00e5 overtale m\u00e5let til \u00e5 godkjenne en ekstern st\u00f8ttesession uten \u00e5 bekrefte foresp\u00f8rselen gjennom en intern kanal.<\/p>\n\n\n\n

N\u00e5r en ansatt aksepterte foresp\u00f8rselen, fikk angriperne direkte tilgang til enheten og begynte \u00e5 installere flere verkt\u00f8y.<\/p>\n\n\n\n

RemSupp erstatter Microsoft Hurtigassistent i senere angrep<\/h3>\n\n\n\n

Tidlige versjoner av kampanjen baserte seg tungt p\u00e5 Microsoft Hurtigassistent, en legitim Windows-st\u00f8ttefunksjon som lar en annen person se eller styre en datamaskin eksternt.<\/p>\n\n\n\n

N\u00e5r Hurtigassistent var blokkert eller utilgjengelig, instruerte angriperne ofrene om \u00e5 installere annen programvare for ekstern administrasjon. De stolte i \u00f8kende grad p\u00e5 den skybaserte tjenesten RemSupp fra april og utover.<\/p>\n\n\n\n

Sophos tror at RemSupp kan ha blitt det foretrukne alternativet fordi f\u00e6rre blokkeringslister for bedriftsapplikasjoner gjenkjente det. Bruk av legitim programvare for ekstern st\u00f8tte bidro ogs\u00e5 til at angriperne unngikk \u00e5 distribuere \u00e5penbart ondsinnede verkt\u00f8y under det f\u00f8rste trinnet av angrepet.<\/p>\n\n\n\n

PowerShell laster ned en vedvarende bakd\u00f8r<\/h3>\n\n\n\n

Etter \u00e5 ha f\u00e5tt ekstern tilgang, brukte angriperne PowerShell-kommandoer for \u00e5 laste ned en bakd\u00f8r til offerets %AppData%-mappe.<\/p>\n\n\n\n

Skadevaren samlet informasjon om det kompromitterte systemet, opprettet utholdenhetsmekanismer og opprettholdt tilgang etter at den opprinnelige Teams- eller eksterne st\u00f8ttesessionen var avsluttet.<\/p>\n\n\n\n

For \u00e5 f\u00e5 aktiviteten til \u00e5 virke legitim, opprettet angriperne registeroppf\u00f8ringer med navn som lignet p\u00e5 Windows-lydkomponenter. Observerte navn inkluderte Realtek HD Audio, Realtek Audio UHD og WinAudio life2.<\/p>\n\n\n\n

Disse oppf\u00f8ringene lot skadevaren starte automatisk samtidig som det ble vanskeligere for ansatte og administratorer \u00e5 identifisere den mistenkelige prosessen.<\/p>\n\n\n\n

Angripere installerer flere eksterne tilgangsverkt\u00f8y<\/h3>\n\n\n\n

I hendelser som utviklet seg til l\u00f8sepengevirus, installerte gruppen flere eksterne tilgangsprogrammer, inkludert DWAgent og AnyDesk.<\/p>\n\n\n\n

Disse verkt\u00f8yene ga sikkerhetskopiert tilgang dersom forsvarerne avbr\u00f8t den opprinnelige tilkoblingen. Angriperne pr\u00f8vde ogs\u00e5 \u00e5 aktivere Remote Desktop Protocol, noe som kunne hjelpe dem med \u00e5 f\u00e5 tilgang til andre systemer og bevege seg p\u00e5 tvers av bedriftsnettverket.<\/p>\n\n\n\n

Sophos observerte gjentatte endringer i angrepskjeden mellom februar og mai. Operat\u00f8rene justerte verkt\u00f8yene, kommandoene og utholdenhetsmetodene sine ettersom sikkerhetsprodukter begynte \u00e5 oppdage tidligere versjoner.<\/p>\n\n\n\n

Chaos ransomware krypterte flere systemer samtidig<\/h3>\n\n\n\n

Minst tre STAC4749-angrep resulterte i utrulling av Chaos ransomware. Under disse hendelsene krypterte l\u00f8sepengeviruset filer p\u00e5 tvers av flere kompromitterte datamaskiner omtrent samtidig.<\/p>\n\n\n\n

Bevis fra minst ett angrep tyder p\u00e5 at gruppen kan ha stj\u00e5let bedriftsdata f\u00f8r krypteringen startet. Dette ville gj\u00f8re det mulig for angriperne \u00e5 presse offeret med b\u00e5de dataeksponering og systemforstyrrelser.<\/p>\n\n\n\n

Sophos vurderer kampanjen som \u00f8konomisk motivert. Operat\u00f8rene kan distribuere l\u00f8sepengevirus selv eller gi tilgang til separate l\u00f8sepengevirustilknyttede akt\u00f8rer etter at nettverket er kompromittert.<\/p>\n\n\n\n

Andre trusselgrupper har ogs\u00e5 brukt Microsoft Teams til sosial manipulasjon. Den iransk-statsst\u00f8ttede MuddyWater-gruppen har brukt Teams og falsk l\u00f8sepengevirusaktivitet for \u00e5 skjule spionasjeoperasjoner.<\/p>\n\n\n\n

Chaos-relaterte kampanjer har ogs\u00e5 brukt andre teknikker. I en separat operasjon brukte Chaos ransomware msaRAT for \u00e5 skjule ondsinnet trafikk inne i Chrome og Edge.<\/p>\n\n\n\n

Hvordan organisasjoner kan blokkere Teams-vishing-angrep<\/h3>\n\n\n\n

Bedrifter b\u00f8r begrense ekstern Microsoft Teams-kommunikasjon eller overv\u00e5ke n\u00f8ye meldinger og samtaler fra kontoer utenfor organisasjonen.<\/p>\n\n\n\n

Ansatte b\u00f8r aldri godkjenne en uventet foresp\u00f8rsel om ekstern st\u00f8tte uten \u00e5 bekrefte den gjennom en offisiell intern kontaktmetode. IT-avdelinger b\u00f8r ogs\u00e5 tydelig forklare hvilke verkt\u00f8y teknikerne deres bruker, og hvordan legitime st\u00f8tteforesp\u00f8rsler starter.<\/p>\n\n\n\n

Sikkerhetsteam b\u00f8r blokkere eller begrense Hurtigassistent, RemSupp, AnyDesk, DWAgent og lignende programvare p\u00e5 systemer som ikke krever ekstern administrasjon.<\/p>\n\n\n\n

Organisasjoner b\u00f8r overv\u00e5ke uvanlig PowerShell-aktivitet, inkludert uventede nedlastinger eller kodede kommandoer, samt installasjon av nye eller uautoriserte programmer for ekstern administrasjon. Denne atferden kan tyde p\u00e5 at en angriper har f\u00e5tt innledende tilgang og pr\u00f8ver \u00e5 etablere kontroll over et system.<\/p>\n\n\n\n

De b\u00f8r ogs\u00e5 se etter mistenkelige registeroppf\u00f8ringer som etterligner legitim lydprogramvare, fors\u00f8k p\u00e5 \u00e5 aktivere Remote Desktop Protocol, og eksterne Microsoft Teams-kontoer som utgir seg for \u00e5 v\u00e6re interne st\u00f8ttemedarbeidere. Til sammen kan disse indikatorene bidra til \u00e5 identifisere sosial manipulasjon og aktivitet etter kompromittering tidlig i en angrepskjede.<\/p>\n\n\n\n

I andre sikkerhetsnyheter, sliter Microsoft med \u00e5 h\u00e5ndtere s\u00e5rbarheter<\/a> identifisert av Anthropics Claude Mythos. Etter hvert som sikkerhetsforskning blir mer automatisert, kan ogs\u00e5 angripere finne og utnytte programvaresvakheter raskere.<\/p>\n\n\n\n

Kilde: BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trusselakt\u00f8rer utgir seg for \u00e5 v\u00e6re bedriftens IT-supportmedarbeidere p\u00e5 Microsoft Teams for \u00e5 oppn\u00e5 ekstern tilgang til ansattes enheter og distribuere Chaos ransomware. Sophos sporer kampanjen som STAC4749. Sikkerhetsselskapet observerte dusinvis av fors\u00f8k p\u00e5 angrep mot organisasjoner i USA og Canada mellom februar og juni 2026. Minst tre hendelser endte med l\u00f8sepengevirus-kryptering. Angripere utgir seg […]<\/p>\n","protected":false},"author":49,"featured_media":1257,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-1256","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)<\/title>\n<meta name=\"description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep\" \/>\n<meta property=\"og:description\" content=\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport NO (Norwegen)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:35:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-31T08:38:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep\",\"datePublished\":\"2026-07-31T08:35:13+00:00\",\"dateModified\":\"2026-07-31T08:38:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/\"},\"wordCount\":789,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/\",\"name\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"datePublished\":\"2026-07-31T08:35:13+00:00\",\"dateModified\":\"2026-07-31T08:38:12+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/wp-content\\\/uploads\\\/sites\\\/13\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos Ransomware-angrep\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/\",\"name\":\"WindowsReport NO (Norwegen)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/no\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)","description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep","og_description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","og_url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/","og_site_name":"WindowsReport NO (Norwegen)","article_published_time":"2026-07-31T08:35:13+00:00","article_modified_time":"2026-07-31T08:38:12+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep","datePublished":"2026-07-31T08:35:13+00:00","dateModified":"2026-07-31T08:38:12+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/"},"wordCount":789,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/","url":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/","name":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos-ransomwareangrep - WindowsReport NO (Norwegen)","isPartOf":{"@id":"https:\/\/windowsreport.com\/no\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg","datePublished":"2026-07-31T08:35:13+00:00","dateModified":"2026-07-31T08:38:12+00:00","author":{"@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackere utgir seg for \u00e5 v\u00e6re IT-supportpersonell p\u00e5 Microsoft Teams for \u00e5 f\u00e5 fjernkontroll og distribuere Chaos ransomware p\u00e5 tvers av bedriftsnettverk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#primaryimage","url":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg","contentUrl":"https:\/\/windowsreport.com\/no\/wp-content\/uploads\/sites\/13\/2026\/07\/teams-chaos-ransomware-5.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/no\/microsoft-teams-it-stottesvindel-forer-til-chaos-ransomware-angrep-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/no\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-st\u00f8ttesvindel f\u00f8rer til Chaos Ransomware-angrep"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/no\/#website","url":"https:\/\/windowsreport.com\/no\/","name":"WindowsReport NO (Norwegen)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/no\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/no\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/no\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1256","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/comments?post=1256"}],"version-history":[{"count":1,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1256\/revisions"}],"predecessor-version":[{"id":1258,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/posts\/1256\/revisions\/1258"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media\/1257"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/media?parent=1256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/categories?post=1256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/tags?post=1256"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/no\/wp-json\/wp\/v2\/work?post=1256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}