{"id":3314,"date":"2026-07-31T08:29:29","date_gmt":"2026-07-31T08:29:29","guid":{"rendered":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/"},"modified":"2026-07-31T08:29:29","modified_gmt":"2026-07-31T08:29:29","slug":"microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/","title":{"rendered":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker"},"content":{"rendered":"\n

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportmedarbetare p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos ransomware.<\/p>\n\n\n\n

Sophos f\u00f6ljer kampanjen som STAC4749<\/a>. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. Minst tre incidenter slutade med ransomware-kryptering.<\/p>\n\n\n\n

Angripare utger sig f\u00f6r att vara IT-personal p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriparna kontaktade anst\u00e4llda via externa Microsoft Teams-konton. Under chattar och r\u00f6stsamtal presenterade de sig som helpdesk-tekniker eller medlemmar av f\u00f6retagets IT-avdelning.<\/p>\n\n\n\n

De p\u00e5stod sedan att de beh\u00f6vde tillg\u00e5ng till den anst\u00e4lldes dator f\u00f6r att l\u00f6sa ett tekniskt problem. M\u00e5let var att \u00f6vertyga m\u00e5ltavlan att godk\u00e4nna en fj\u00e4rrsupportsession utan att verifiera beg\u00e4ran via en intern kanal.<\/p>\n\n\n\n

N\u00e4r en anst\u00e4lld accepterade beg\u00e4ran fick angriparna direkt \u00e5tkomst till enheten och b\u00f6rjade installera ytterligare verktyg.<\/p>\n\n\n\n

RemSupp ers\u00e4tter Microsoft Snabbassistens i senare attacker<\/h3>\n\n\n\n

Tidiga versioner av kampanjen f\u00f6rlitade sig starkt p\u00e5 Microsoft Snabbassistens, en legitim Windows-supportfunktion som till\u00e5ter en annan person att visa eller styra en dator p\u00e5 distans.<\/p>\n\n\n\n

N\u00e4r Snabbassistens blockerades eller var otillg\u00e4nglig instruerade angriparna offren att installera annan fj\u00e4rrstyrningsprogramvara. De f\u00f6rlitade sig alltmer p\u00e5 den molnbaserade RemSupp-tj\u00e4nsten fr\u00e5n och med april.<\/p>\n\n\n\n

Sophos tror att RemSupp kan ha blivit det f\u00f6redragna alternativet eftersom f\u00e4rre f\u00f6retagsblocklistor f\u00f6r program k\u00e4nde igen det. Att anv\u00e4nda legitim fj\u00e4rrsupportprogramvara hj\u00e4lpte ocks\u00e5 angriparna att undvika att distribuera uppenbart skadliga verktyg under attackens f\u00f6rsta fas.<\/p>\n\n\n\n

PowerShell laddar ner en best\u00e4ndig bakd\u00f6rr<\/h3>\n\n\n\n

Efter att ha f\u00e5tt fj\u00e4rr\u00e5tkomst anv\u00e4nde angriparna PowerShell-kommandon f\u00f6r att ladda ner en bakd\u00f6rr i offrets %AppData%-mapp.<\/p>\n\n\n\n

Skadeprogrammet samlade information om det komprometterade systemet, skapade best\u00e4ndighetsmekanismer och uppr\u00e4tth\u00f6ll \u00e5tkomst efter att den ursprungliga Teams- eller fj\u00e4rrsupportsessionen avslutats.<\/p>\n\n\n\n

F\u00f6r att f\u00e5 aktiviteten att verka legitim skapade angriparna registerposter med namn som liknade Windows-ljudkomponenter. Observerade namn inkluderade Realtek HD Audio, Realtek Audio UHD och WinAudio life2.<\/p>\n\n\n\n

Dessa poster gjorde att skadeprogrammet kunde starta automatiskt samtidigt som det gjorde det sv\u00e5rare f\u00f6r anst\u00e4llda och administrat\u00f6rer att identifiera den misst\u00e4nkta processen.<\/p>\n\n\n\n

Angriparna installerar flera fj\u00e4rr\u00e5tkomstverktyg<\/h3>\n\n\n\n

I incidenter som utvecklades till ransomware installerade gruppen ytterligare fj\u00e4rr\u00e5tkomstprogram, inklusive DWAgent och AnyDesk.<\/p>\n\n\n\n

Dessa verktyg gav backup-\u00e5tkomst om f\u00f6rsvarare avbr\u00f6t den ursprungliga anslutningen. Angriparna f\u00f6rs\u00f6kte ocks\u00e5 aktivera Fj\u00e4rrskrivbordsprotokoll, vilket kunde hj\u00e4lpa dem att komma \u00e5t andra system och f\u00f6rflytta sig i f\u00f6retagsn\u00e4tverket.<\/p>\n\n\n\n

Sophos observerade upprepade \u00e4ndringar i attackkedjan mellan februari och maj. Operat\u00f6rerna anpassade sina verktyg, kommandon och best\u00e4ndighetsmetoder allt eftersom s\u00e4kerhetsprodukter b\u00f6rjade uppt\u00e4cka tidigare versioner.<\/p>\n\n\n\n

Chaos ransomware krypterade flera system samtidigt<\/h3>\n\n\n\n

Minst tre STAC4749-attacker resulterade i distribution av Chaos ransomware. Under dessa incidenter krypterade ransomwaren filer p\u00e5 flera komprometterade datorer vid ungef\u00e4r samma tidpunkt.<\/p>\n\n\n\n

Bevis fr\u00e5n minst en attack tyder p\u00e5 att gruppen kan ha stulit f\u00f6retagsdata innan krypteringen p\u00e5b\u00f6rjades. Detta skulle g\u00f6ra det m\u00f6jligt f\u00f6r angriparna att pressa offret med b\u00e5de dataexponering och systemavbrott.<\/p>\n\n\n\n

Sophos bed\u00f6mer att kampanjen \u00e4r ekonomiskt motiverad. Operat\u00f6rerna kan distribuera ransomware sj\u00e4lva eller ge \u00e5tkomst till separata ransomware-anslutna efter att ha komprometterat ett n\u00e4tverk.<\/p>\n\n\n\n

Andra hotgrupper har ocks\u00e5 anv\u00e4nt Microsoft Teams f\u00f6r social manipulation. Den iranska statsst\u00f6dda MuddyWater-gruppen har anv\u00e4nt Teams och falsk ransomware-aktivitet f\u00f6r att d\u00f6lja spionoperationer.<\/p>\n\n\n\n

Chaos-relaterade kampanjer har ocks\u00e5 anv\u00e4nt andra tekniker. I en separat operation anv\u00e4nde Chaos ransomware msaRAT f\u00f6r att d\u00f6lja skadlig trafik i Chrome och Edge.<\/p>\n\n\n\n

Hur organisationer kan blockera Teams-vishingattacker<\/h3>\n\n\n\n

F\u00f6retag b\u00f6r begr\u00e4nsa extern Microsoft Teams-kommunikation eller noggrant \u00f6vervaka meddelanden och samtal fr\u00e5n konton utanf\u00f6r organisationen.<\/p>\n\n\n\n

Anst\u00e4llda b\u00f6r aldrig godk\u00e4nna en ov\u00e4ntad fj\u00e4rrsupportbeg\u00e4ran utan att bekr\u00e4fta den via en officiell intern kontaktmetod. IT-avdelningar b\u00f6r ocks\u00e5 tydligt f\u00f6rklara vilka verktyg deras tekniker anv\u00e4nder och hur legitima supportbeg\u00e4randen inleds.<\/p>\n\n\n\n

S\u00e4kerhetsteam b\u00f6r blockera eller begr\u00e4nsa Snabbassistens, RemSupp, AnyDesk, DWAgent och liknande programvara p\u00e5 system som inte kr\u00e4ver fj\u00e4rradministration.<\/p>\n\n\n\n

Organisationer b\u00f6r \u00f6vervaka ovanlig PowerShell-aktivitet, inklusive ov\u00e4ntade nedladdningar eller kodade kommandon, samt installation av nya eller obeh\u00f6riga fj\u00e4rrstyrningsprogram. Dessa beteenden kan tyda p\u00e5 att en angripare har f\u00e5tt initial \u00e5tkomst och f\u00f6rs\u00f6ker etablera kontroll \u00f6ver ett system.<\/p>\n\n\n\n

De b\u00f6r ocks\u00e5 h\u00e5lla utkik efter misst\u00e4nkta registerposter som efterliknar legitim ljudprogramvara, f\u00f6rs\u00f6k att aktivera Fj\u00e4rrskrivbordsprotokoll och externa Microsoft Teams-konton som utger sig f\u00f6r att vara intern supportpersonal. Tillsammans kan dessa indikatorer hj\u00e4lpa till att identifiera social manipulation och aktivitet efter kompromettering tidigt i en attackkedja.<\/p>\n\n\n\n

I andra s\u00e4kerhetsnyheter k\u00e4mpar Microsoft med att \u00e5tg\u00e4rda s\u00e5rbarheter<\/a> som identifierats av Anthropics Claude Mythos. I takt med att s\u00e4kerhetsforskning blir mer automatiserad kan \u00e4ven angripare hitta och utnyttja programvarusvagheter snabbare.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportmedarbetare p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos ransomware. Sophos f\u00f6ljer kampanjen som STAC4749. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. Minst tre incidenter slutade med ransomware-kryptering. Angripare utger sig f\u00f6r att […]<\/p>\n","protected":false},"author":49,"featured_media":3315,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-3314","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker - WindowsReport SE (Swedish)<\/title>\n<meta name=\"description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker\" \/>\n<meta property=\"og:description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport SE (Swedish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:29:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker\",\"datePublished\":\"2026-07-31T08:29:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/\"},\"wordCount\":866,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-2.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/\",\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker - WindowsReport SE (Swedish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-2.jpg\",\"datePublished\":\"2026-07-31T08:29:29+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-2.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-2.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\",\"name\":\"WindowsReport SE (Swedish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker - WindowsReport SE (Swedish)","description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker","og_description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","og_url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/","og_site_name":"WindowsReport SE (Swedish)","article_published_time":"2026-07-31T08:29:29+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker","datePublished":"2026-07-31T08:29:29+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/"},"wordCount":866,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/","url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/","name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker - WindowsReport SE (Swedish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg","datePublished":"2026-07-31T08:29:29+00:00","author":{"@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#primaryimage","url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg","contentUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-2.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomwareattacker-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/se\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos ransomwareattacker"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/se\/#website","url":"https:\/\/windowsreport.com\/se\/","name":"WindowsReport SE (Swedish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/se\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/comments?post=3314"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3314\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media\/3315"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media?parent=3314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/categories?post=3314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/tags?post=3314"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/work?post=3314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}