Fake IT Support Calls on Microsoft Teams Deliver EtherRAT Malware

Threat actors are abusing Microsoft Teams voice calls, impersonating corporate IT support staff, to trick employees into installing EtherRAT malware. Successful social engineering gives attackers initial access to corporate networks. The technique mirrors known “helpdesk vishing” tactics used by other threat groups. Staff should be trained to verify IT support requests through a separate, trusted channel before installing anything on a call’s instruction.