Tag: social engineering attack

A report by a security company described how 30% of “monitored organizations” experienced an attack by a spurious IT worker over Teams federated chat. These kinds of social engineering attacks do happen, but Teams includes an array of defensive features that Microsoft 365 tenants can use to resist this kind of activity. The interesting question is just how prevalent these attacks are in the wider Teams installed base and how many of the tenants who are successfully attacked use features like an external access allow list.

A recent report noted an increase in social engineering attacks through Teams federated chat. You can stop these attacks by limiting external access to an allow list of known domains, which is what I do. Or you can depend on the technology built into Teams to detect suspicious connections and remind users about potential risk. This now extends to connections from brands commonly targeted by phishers.