Cyber criminal gang, Black Basta, is using Microsoft Teams and malicious QR codes for targeted social engineering attacks.
Black Basta initiates a spam campaign, poses as IT help-desk representatives, and exploits users through Teams chats.
Attackers create impersonation accounts, use QR codes to redirect users, and continue with spam emails and vishing calls.
Safeguards to protect against these tactics include limiting external communication, enhancing anti-spam filters, monitoring display names, and educating on QR code risks.