{"id":3320,"date":"2026-07-31T08:37:41","date_gmt":"2026-07-31T08:37:41","guid":{"rendered":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/"},"modified":"2026-07-31T08:37:41","modified_gmt":"2026-07-31T08:37:41","slug":"microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/","title":{"rendered":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker"},"content":{"rendered":"\n

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos-ransomware.<\/p>\n\n\n\n

Sophos sp\u00e5rar kampanjen som STAC4749<\/a>. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. Minst tre incidenter slutade med ransomware-kryptering.<\/p>\n\n\n\n

Angripare utger sig f\u00f6r att vara IT-personal p\u00e5 Microsoft Teams<\/h2>\n\n\n\n

Angriparna kontaktade anst\u00e4llda via externa Microsoft Teams-konton. Under chattar och r\u00f6stsamtal presenterade de sig som helpdesk-tekniker eller medlemmar av f\u00f6retagets IT-avdelning.<\/p>\n\n\n\n

De h\u00e4vdade sedan att de beh\u00f6vde \u00e5tkomst till den anst\u00e4lldes dator f\u00f6r att l\u00f6sa ett tekniskt problem. Deras m\u00e5l var att \u00f6vertala m\u00e5ltavlan att godk\u00e4nna en fj\u00e4rrsupportsession utan att verifiera beg\u00e4ran via en intern kanal.<\/p>\n\n\n\n

N\u00e4r en anst\u00e4lld accepterade beg\u00e4ran fick angriparna direkt \u00e5tkomst till enheten och b\u00f6rjade installera ytterligare verktyg.<\/p>\n\n\n\n

RemSupp ers\u00e4tter Microsoft Snabb assistans i senare attacker<\/h3>\n\n\n\n

Tidiga versioner av kampanjen f\u00f6rlitade sig starkt p\u00e5 Microsoft Snabb assistans, en legitim supportfunktion i Windows som g\u00f6r det m\u00f6jligt f\u00f6r en annan person att visa eller fj\u00e4rrstyra en dator.<\/p>\n\n\n\n

N\u00e4r Snabb assistans blockerades eller var otillg\u00e4nglig instruerade angriparna offren att installera annan programvara f\u00f6r fj\u00e4rrhantering. Fr\u00e5n och med april f\u00f6rlitade de sig i allt h\u00f6gre grad p\u00e5 den molnbaserade tj\u00e4nsten RemSupp.<\/p>\n\n\n\n

Sophos tror att RemSupp kan ha blivit det f\u00f6redragna alternativet eftersom f\u00e4rre f\u00f6retags applikationsblockeringslistor k\u00e4nde igen det. Att anv\u00e4nda legitim programvara f\u00f6r fj\u00e4rrsupport hj\u00e4lpte ocks\u00e5 angriparna att undvika att distribuera uppenbart skadliga verktyg under attackens f\u00f6rsta fas.<\/p>\n\n\n\n

PowerShell laddar ner en best\u00e4ndig bakd\u00f6rr<\/h3>\n\n\n\n

Efter att ha f\u00e5tt fj\u00e4rr\u00e5tkomst anv\u00e4nde angriparna PowerShell-kommandon f\u00f6r att ladda ner en bakd\u00f6rr till offrets %AppData%-mapp.<\/p>\n\n\n\n

Skadeprogrammet samlade information om det komprometterade systemet, skapade persistensmekanismer och beh\u00f6ll \u00e5tkomsten efter att den ursprungliga Teams- eller fj\u00e4rrsupportsessionen avslutats.<\/p>\n\n\n\n

F\u00f6r att f\u00e5 aktiviteten att verka legitim skapade angriparna registerposter med namn som liknade Windows-ljudkomponenter. Observerade namn inkluderade Realtek HD Audio, Realtek Audio UHD och WinAudio life2.<\/p>\n\n\n\n

Dessa poster gjorde det m\u00f6jligt f\u00f6r skadeprogrammet att starta automatiskt samtidigt som det blev sv\u00e5rare f\u00f6r anst\u00e4llda och administrat\u00f6rer att identifiera den misst\u00e4nkta processen.<\/p>\n\n\n\n

Angriparna installerar flera fj\u00e4rr\u00e5tkomstverktyg<\/h3>\n\n\n\n

I incidenter som \u00f6vergick till ransomware installerade gruppen ytterligare fj\u00e4rr\u00e5tkomstapplikationer, d\u00e4ribland DWAgent och AnyDesk.<\/p>\n\n\n\n

Dessa verktyg gav reserv\u00e5tkomst om f\u00f6rsvararna avbr\u00f6t den ursprungliga anslutningen. Angriparna f\u00f6rs\u00f6kte ocks\u00e5 aktivera Remote Desktop Protocol, vilket kunde hj\u00e4lpa dem att komma \u00e5t andra system och f\u00f6rflytta sig \u00f6ver f\u00f6retagsn\u00e4tverket.<\/p>\n\n\n\n

Sophos observerade upprepade f\u00f6r\u00e4ndringar i attackkedjan mellan februari och maj. Operat\u00f6rerna justerade sina verktyg, kommandon och persistensmetoder i takt med att s\u00e4kerhetsprodukter b\u00f6rjade uppt\u00e4cka tidigare versioner.<\/p>\n\n\n\n

Chaos-ransomware krypterade flera system samtidigt<\/h3>\n\n\n\n

Minst tre STAC4749-attacker resulterade i distribution av Chaos-ransomware. Under dessa incidenter krypterade ransomwaren filer p\u00e5 flera komprometterade datorer ungef\u00e4r samtidigt.<\/p>\n\n\n\n

Bevis fr\u00e5n minst en attack tyder p\u00e5 att gruppen kan ha stulit f\u00f6retagsdata innan krypteringen p\u00e5b\u00f6rjades. Detta skulle g\u00f6ra det m\u00f6jligt f\u00f6r angriparna att pressa offret med b\u00e5de datal\u00e4ckage och systemst\u00f6rningar.<\/p>\n\n\n\n

Sophos bed\u00f6mer att kampanjen \u00e4r ekonomiskt motiverad. Operat\u00f6rerna kan distribuera ransomware sj\u00e4lva eller ge \u00e5tkomst till separata ransomware-anslutna akt\u00f6rer efter att ha komprometterat ett n\u00e4tverk.<\/p>\n\n\n\n

Andra hotgrupper har ocks\u00e5 anv\u00e4nt Microsoft Teams f\u00f6r social engineering. Den iranska statsunderst\u00f6dda gruppen MuddyWater har anv\u00e4nt Teams och falsk ransomware-aktivitet f\u00f6r att d\u00f6lja spionageoperationer.<\/p>\n\n\n\n

Chaos-relaterade kampanjer har ocks\u00e5 anv\u00e4nt andra tekniker. I en separat operation anv\u00e4nde Chaos-ransomware msaRAT f\u00f6r att d\u00f6lja skadlig trafik i Chrome och Edge.<\/p>\n\n\n\n

S\u00e5 kan organisationer blockera Teams vishing-attacker<\/h3>\n\n\n\n

F\u00f6retag b\u00f6r begr\u00e4nsa extern Microsoft Teams-kommunikation eller noggrant \u00f6vervaka meddelanden och samtal fr\u00e5n konton utanf\u00f6r organisationen.<\/p>\n\n\n\n

Anst\u00e4llda ska aldrig godk\u00e4nna en ov\u00e4ntad beg\u00e4ran om fj\u00e4rrsupport utan att bekr\u00e4fta den via en officiell intern kontaktmetod. IT-avdelningar b\u00f6r ocks\u00e5 tydligt f\u00f6rklara vilka verktyg deras tekniker anv\u00e4nder och hur legitima supportf\u00f6rfr\u00e5gningar inleds.<\/p>\n\n\n\n

S\u00e4kerhetsteam b\u00f6r blockera eller begr\u00e4nsa Snabb assistans, RemSupp, AnyDesk, DWAgent och liknande programvara p\u00e5 system som inte kr\u00e4ver fj\u00e4rradministration.<\/p>\n\n\n\n

Organisationer b\u00f6r \u00f6vervaka ovanlig PowerShell-aktivitet, inklusive ov\u00e4ntade nedladdningar eller kodade kommandon, samt installation av nya eller obeh\u00f6riga fj\u00e4rrhanteringsprogram. Dessa beteenden kan indikera att en angripare har f\u00e5tt inledande \u00e5tkomst och f\u00f6rs\u00f6ker etablera kontroll \u00f6ver ett system.<\/p>\n\n\n\n

De b\u00f6r ocks\u00e5 vara uppm\u00e4rksamma p\u00e5 misst\u00e4nkta registerposter som efterliknar legitim ljudprogramvara, f\u00f6rs\u00f6k att aktivera Remote Desktop Protocol och externa Microsoft Teams-konton som utger sig f\u00f6r att vara intern supportpersonal. Tillsammans kan dessa indikatorer bidra till att identifiera social engineering och aktivitet efter kompromettering tidigt i en attackkedja.<\/p>\n\n\n\n

I andra s\u00e4kerhetsnyheter: Microsoft k\u00e4mpar med att \u00e5tg\u00e4rda s\u00e5rbarheter<\/a> som identifierats av Anthropics Claude Mythos. I takt med att s\u00e4kerhetsforskningen blir mer automatiserad kan angripare ocks\u00e5 hitta och utnyttja programvarusvagheter snabbare.<\/p>\n\n\n\n

Via BleepingComputer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Hotakt\u00f6rer utger sig f\u00f6r att vara f\u00f6retagets IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst till anst\u00e4lldas enheter och distribuera Chaos-ransomware. Sophos sp\u00e5rar kampanjen som STAC4749. S\u00e4kerhetsf\u00f6retaget observerade dussintals f\u00f6rs\u00f6k till attacker mot organisationer i USA och Kanada mellan februari och juni 2026. Minst tre incidenter slutade med ransomware-kryptering. Angripare utger sig f\u00f6r att vara […]<\/p>\n","protected":false},"author":49,"featured_media":3321,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[1],"tags":[],"work":[],"class_list":["post-3320","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nMicrosoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker - WindowsReport SE (Swedish)<\/title>\n<meta name=\"description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker\" \/>\n<meta property=\"og:description\" content=\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport SE (Swedish)\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T08:37:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"801\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Milan Stanojevic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MilanStanojev17\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Milan Stanojevic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/\"},\"author\":{\"name\":\"Milan Stanojevic\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"headline\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker\",\"datePublished\":\"2026-07-31T08:37:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/\"},\"wordCount\":892,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/\",\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker - WindowsReport SE (Swedish)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"datePublished\":\"2026-07-31T08:37:41+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\"},\"description\":\"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/wp-content\\\/uploads\\\/sites\\\/14\\\/2026\\\/07\\\/teams-chaos-ransomware-5.jpg\",\"width\":1280,\"height\":801},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/\",\"name\":\"WindowsReport SE (Swedish)\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/#\\\/schema\\\/person\\\/e3910b02e4592db47a0eb303765a3a25\",\"name\":\"Milan Stanojevic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g\",\"caption\":\"Milan Stanojevic\"},\"description\":\"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/MilanStanojev17\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/se\\\/author\\\/milan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker - WindowsReport SE (Swedish)","description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker","og_description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk","og_url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/","og_site_name":"WindowsReport SE (Swedish)","article_published_time":"2026-07-31T08:37:41+00:00","og_image":[{"width":1280,"height":801,"url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg","type":"image\/jpeg"}],"author":"Milan Stanojevic","twitter_card":"summary_large_image","twitter_creator":"@MilanStanojev17","twitter_misc":{"Written by":"Milan Stanojevic","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/"},"author":{"name":"Milan Stanojevic","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"headline":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker","datePublished":"2026-07-31T08:37:41+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/"},"wordCount":892,"commentCount":0,"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/","url":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/","name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker - WindowsReport SE (Swedish)","isPartOf":{"@id":"https:\/\/windowsreport.com\/se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg","datePublished":"2026-07-31T08:37:41+00:00","author":{"@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25"},"description":"Hackare utger sig f\u00f6r att vara IT-supportpersonal p\u00e5 Microsoft Teams f\u00f6r att f\u00e5 fj\u00e4rr\u00e5tkomst och sprida Chaos ransomware \u00f6ver f\u00f6retagsn\u00e4tverk","breadcrumb":{"@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#primaryimage","url":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg","contentUrl":"https:\/\/windowsreport.com\/se\/wp-content\/uploads\/sites\/14\/2026\/07\/teams-chaos-ransomware-5.jpg","width":1280,"height":801},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/se\/microsoft-teams-it-supportbedragerier-leder-till-chaos-ransomware-attacker-4\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/se\/"},{"@type":"ListItem","position":2,"name":"Microsoft Teams IT-supportbedr\u00e4gerier leder till Chaos Ransomware-attacker"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/se\/#website","url":"https:\/\/windowsreport.com\/se\/","name":"WindowsReport SE (Swedish)","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windowsreport.com\/se\/#\/schema\/person\/e3910b02e4592db47a0eb303765a3a25","name":"Milan Stanojevic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fdfb58c5f9c33b78cbac22bd664ac8335249104922392e67d69d32ee59624544?s=96&d=mm&r=g","caption":"Milan Stanojevic"},"description":"Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.","sameAs":["https:\/\/x.com\/MilanStanojev17"],"url":"https:\/\/windowsreport.com\/se\/author\/milan\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/comments?post=3320"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/posts\/3320\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media\/3321"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/media?parent=3320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/categories?post=3320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/tags?post=3320"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/se\/wp-json\/wp\/v2\/work?post=3320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}