Impersonation of Microsoft Teams Used to Deliver Malware Attackers use fake IT support interactions at Microsoft Teams to deliver malware and ransomware, combining social engineering with a trusted corporate communications platform. The lure centers on a disguised support team, giving the initial approach a legitimate appearance within routine workplace traffic. The profession stands out because it moves the penetration activity into a native collaboration channel that many organizations regard as low-friction and high-trust. This reduces user suspicion, complicates detection, and turns internal messaging workflows into an access vector for later compromise. Open sources - closed narratives.