Fake Microsoft Teams Installers: How Oyster Malware Slips Past Trust

How the Attack Works Researchers observed attackers using Search Engine Optimisation (SEO) poisoning and paid ads to lure users searching for “Teams download.” Victims were redirected to fraudulent domains such as teams-install[.]top which closely mimic legitimate Microsoft download pages. On these sites, users were offered a trojanised installer named MSTeamsSetup.exe (the same name as Microsoft’s…

Read More

Using Microsoft Teams? Don’t Assume It’s Safe – Verify

This isn’t a vulnerability – it’s an abuse of trust. Threat actors pose as IT support, call targets via Teams, and convince them to launch Windows Quick Assist. The result? Full access, malware deployed, and monitoring bypassed. What makes this threat particularly dangerous: 🔸 Real-time social engineering, not phishing emails 🔸 Abuse of legitimate tools…

Read More

Uncovering the Unknown

The Overlooked Link: A Modern-Day Scenario You’ve moved to the cloud – no more backroom servers or managing racks of hardware. Your apps, files, services, and systems are now hosted by global, reliable providers. But there’s still one very real point of failure: your local network. One misconfigured switch, a faulty router, or a dropped…

Read More