{"id":3312,"date":"2026-07-31T08:29:22","date_gmt":"2026-07-31T08:29:22","guid":{"rendered":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/"},"modified":"2026-07-31T08:29:22","modified_gmt":"2026-07-31T08:29:22","slug":"microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/","title":{"rendered":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker"},"content":{"rendered":"\n

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos ransomware.<\/p>\n\n\n\n

Sophos sp\u00e5rar kampanjen som STAC4749<\/a>. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. \u00c5tminstone tre incidenter slutade med ransomware-kryptering.<\/p>\n\n\n\n

Angripare utger sig f\u00f6r att vara IT-personal p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriparna kontaktade anst\u00e4llda via externa Microsoft Teams-konton. Under chattar och r\u00f6stsamtal presenterade de sig som helpdesk-tekniker eller medlemmar av f\u00f6retagets IT-avdelning.<\/p>\n\n\n\n

D\u00e4refter h\u00e4vdade de att de beh\u00f6vde \u00e5tkomst till den anst\u00e4lldes dator f\u00f6r att l\u00f6sa ett tekniskt problem. Deras m\u00e5l var att \u00f6vertala m\u00e5let att godk\u00e4nna en fj\u00e4rrsupportsession utan att verifiera f\u00f6rfr\u00e5gan via en intern kanal.<\/p>\n\n\n\n

N\u00e4r en anst\u00e4lld accepterade f\u00f6rfr\u00e5gan fick angriparna direkt \u00e5tkomst till enheten och b\u00f6rjade installera ytterligare verktyg.<\/p>\n\n\n\n

RemSupp ers\u00e4tter Microsoft Snabbassistans i senare attacker<\/h3>\n\n\n\n

Tidiga versioner av kampanjen f\u00f6rlitade sig starkt p\u00e5 Microsoft Snabbassistans, en legitim Windows-supportfunktion som l\u00e5ter en annan person visa eller styra en dator p\u00e5 distans.<\/p>\n\n\n\n

N\u00e4r Snabbassistans var blockerat eller inte tillg\u00e4ngligt instruerade angriparna offren att installera annan fj\u00e4rrhanteringsprogramvara. Fr\u00e5n och med april f\u00f6rlitade de sig alltmer p\u00e5 den molnbaserade tj\u00e4nsten RemSupp.<\/p>\n\n\n\n

Sophos tror att RemSupp kan ha blivit det f\u00f6redragna alternativet eftersom f\u00e4rre f\u00f6retags blocklistor f\u00f6r program k\u00e4nde igen det. Att anv\u00e4nda legitim fj\u00e4rrsupportprogramvara hj\u00e4lpte ocks\u00e5 angriparna att undvika att distribuera uppenbart skadliga verktyg under attackens f\u00f6rsta fas.<\/p>\n\n\n\n

PowerShell laddar ner en best\u00e4ndig bakd\u00f6rr<\/h3>\n\n\n\n

Efter att ha f\u00e5tt fj\u00e4rr\u00e5tkomst anv\u00e4nde angriparna PowerShell-kommandon f\u00f6r att ladda ner en bakd\u00f6rr till offrets %AppData%-mapp.<\/p>\n\n\n\n

Skadeprogrammet samlade information om det komprometterade systemet, skapade best\u00e4ndighetsmekanismer och bibeh\u00f6ll \u00e5tkomst efter att den ursprungliga Teams- eller fj\u00e4rrsupportsessionen avslutats.<\/p>\n\n\n\n

F\u00f6r att f\u00e5 aktiviteten att verka legitim skapade angriparna registerposter med namn som liknade Windows-ljudkomponenter. Observerade namn inkluderade Realtek HD Audio, Realtek Audio UHD och WinAudio life2.<\/p>\n\n\n\n

Dessa poster till\u00e4t skadeprogrammet att starta automatiskt samtidigt som det blev sv\u00e5rare f\u00f6r anst\u00e4llda och administrat\u00f6rer att identifiera den misst\u00e4nkta processen.<\/p>\n\n\n\n

Angripare installerar flera fj\u00e4rr\u00e5tkomstverktyg<\/h3>\n\n\n\n

I incidenter som utvecklades till ransomware installerade gruppen ytterligare fj\u00e4rr\u00e5tkomstprogram, inklusive DWAgent och AnyDesk.<\/p>\n\n\n\n

Dessa verktyg gav reserv\u00e5tkomst om f\u00f6rsvarare avbr\u00f6t den ursprungliga anslutningen. Angriparna f\u00f6rs\u00f6kte ocks\u00e5 aktivera Remote Desktop Protocol, vilket kunde hj\u00e4lpa dem att komma \u00e5t andra system och r\u00f6ra sig \u00f6ver f\u00f6retagsn\u00e4tverket.<\/p>\n\n\n\n

Sophos observerade upprepade f\u00f6r\u00e4ndringar av attackkedjan mellan februari och maj. Operat\u00f6rerna justerade sina verktyg, kommandon och best\u00e4ndighetsmetoder i takt med att s\u00e4kerhetsprodukter b\u00f6rjade uppt\u00e4cka tidigare versioner.<\/p>\n\n\n\n

Chaos ransomware krypterade flera system samtidigt<\/h3>\n\n\n\n

\u00c5tminstone tre STAC4749-attacker resulterade i distribution av Chaos ransomware. Under dessa incidenter krypterade ransomwaren filer p\u00e5 flera komprometterade datorer ungef\u00e4r samtidigt.<\/p>\n\n\n\n

Bevis fr\u00e5n \u00e5tminstone en attack tyder p\u00e5 att gruppen kan ha stulit f\u00f6retagsdata innan de p\u00e5b\u00f6rjade kryptering. Detta skulle g\u00f6ra det m\u00f6jligt f\u00f6r angriparna att uts\u00e4tta offret f\u00f6r p\u00e5tryckningar med b\u00e5de datal\u00e4ckage och systemavbrott.<\/p>\n\n\n\n

Sophos bed\u00f6mer kampanjen som ekonomiskt motiverad. Operat\u00f6rerna kan distribuera ransomware sj\u00e4lva eller ge tillg\u00e5ng till separata ransomware-anslutna akt\u00f6rer efter att ha komprometterat ett n\u00e4tverk.<\/p>\n\n\n\n

Andra hotgrupper har ocks\u00e5 anv\u00e4nt Microsoft Teams f\u00f6r social manipulation. Den iranska statsst\u00f6dda MuddyWater-gruppen har anv\u00e4nt Teams och falsk ransomware-aktivitet f\u00f6r att d\u00f6lja spionageoperationer.<\/p>\n\n\n\n

Kampanjer relaterade till Chaos har ocks\u00e5 anv\u00e4nt andra tekniker. I en separat operation anv\u00e4nde Chaos ransomware msaRAT f\u00f6r att d\u00f6lja skadlig trafik inuti Chrome och Edge.<\/p>\n\n\n\n

Hur organisationer kan blockera vishingattacker via Teams<\/h3>\n\n\n\n

F\u00f6retag b\u00f6r begr\u00e4nsa extern Microsoft Teams-kommunikation eller noggrant \u00f6vervaka meddelanden och samtal fr\u00e5n konton utanf\u00f6r organisationen.<\/p>\n\n\n\n

Anst\u00e4llda b\u00f6r aldrig godk\u00e4nna en ov\u00e4ntad fj\u00e4rrsupportf\u00f6rfr\u00e5gan utan att bekr\u00e4fta den via en officiell intern kontaktmetod. IT-avdelningar b\u00f6r ocks\u00e5 tydligt f\u00f6rklara vilka verktyg deras tekniker anv\u00e4nder och hur legitima supportf\u00f6rfr\u00e5gningar inleds.<\/p>\n\n\n\n

S\u00e4kerhetsteam b\u00f6r blockera eller begr\u00e4nsa Snabbassistans, RemSupp, AnyDesk, DWAgent och liknande programvara p\u00e5 system som inte kr\u00e4ver fj\u00e4rradministration.<\/p>\n\n\n\n

Organisationer b\u00f6r \u00f6vervaka ovanlig PowerShell-aktivitet, inklusive ov\u00e4ntade nedladdningar eller kodade kommandon, samt installation av nya eller obeh\u00f6riga fj\u00e4rrhanteringsprogram. Dessa beteenden kan indikera att en angripare har f\u00e5tt initial \u00e5tkomst och f\u00f6rs\u00f6ker etablera kontroll \u00f6ver ett system.<\/p>\n\n\n\n

De b\u00f6r ocks\u00e5 h\u00e5lla utkik efter misst\u00e4nkta registerposter som efterliknar legitim ljudprogramvara, f\u00f6rs\u00f6k att aktivera Remote Desktop Protocol och externa Microsoft Teams-konton som utger sig f\u00f6r att vara intern supportpersonal. Tillsammans kan dessa indikatorer hj\u00e4lpa till att identifiera social manipulation och aktivitet efter kompromettering tidigt i en attackkedja.<\/p>\n\n\n\n

I andra s\u00e4kerhetsnyheter k\u00e4mpar Microsoft med att \u00e5tg\u00e4rda s\u00e5rbarheter<\/a> som identifierats av Anthropics Claude Mythos. I takt med att s\u00e4kerhetsforskning blir mer automatiserad kan \u00e4ven angripare hitta och utnyttja programvarusvagheter snabbare.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos ransomware. Sophos sp\u00e5rar kampanjen som STAC4749. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. \u00c5tminstone tre incidenter slutade med ransomware-kryptering. Angripare utger sig f\u00f6r att […]<\/p>\n","protected":false},"author":49,"featured_media":3313,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-3312","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker - WindowsReport SE (Swedish)<\/title>\n<meta name=\"description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker\" \/>\n<meta property=\"og:description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport SE (Swedish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:29:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker\",\"datePublished\":\"2026-07-31T08:29:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/\"},\"wordCount\":886,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/\",\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker - WindowsReport SE (Swedish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"datePublished\":\"2026-07-31T08:29:22+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-1.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\",\"name\":\"WindowsReport SE (Swedish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker - WindowsReport SE (Swedish)","description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker","og_description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","og_url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/","og_site_name":"WindowsReport SE (Swedish)","article_published_time":"2026-07-31T08:29:22+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker","datePublished":"2026-07-31T08:29:22+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/"},"wordCount":886,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/","url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/","name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker - WindowsReport SE (Swedish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg","datePublished":"2026-07-31T08:29:22+00:00","author":{"@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och distribuera Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#primaryimage","url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg","contentUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-1.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/se\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos-ransomwareattacker"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/se\/#website","url":"https:\/\/windowsreport.com\/se\/","name":"WindowsReport SE (Swedish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/se\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/comments?post=3312"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3312\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media\/3313"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media?parent=3312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/categories?post=3312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/tags?post=3312"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/work?post=3312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}