Posts by Valeriy Naydonov
Fake Microsoft Teams Installers: How Oyster Malware Slips Past Trust
How the Attack Works Researchers observed attackers using Search Engine Optimisation (SEO) poisoning and paid ads to lure users searching for “Teams download.” Victims were redirected to fraudulent domains such as teams-install[.]top which closely mimic legitimate Microsoft download pages. On these sites, users were offered a trojanised installer named MSTeamsSetup.exe (the same name as Microsoft’s…
Read MoreWhy Regular Information Security Reviews Are Critical in Biotech and Pharma
Cybersecurity may not be front of mind for non-executive roles, such as R&D teams, facilities, or other non-technical staff – but it should be. In a biotech environment, every employee plays a role in protecting sensitive data, and anyone can be the weakest link. Information Security (IS) reviews help safeguard your data, your research, your…
Read MoreUsing Microsoft Teams? Don’t Assume It’s Safe – Verify
This isn’t a vulnerability – it’s an abuse of trust. Threat actors pose as IT support, call targets via Teams, and convince them to launch Windows Quick Assist. The result? Full access, malware deployed, and monitoring bypassed. What makes this threat particularly dangerous: 🔸 Real-time social engineering, not phishing emails 🔸 Abuse of legitimate tools…
Read MoreUncovering the Unknown
The Overlooked Link: A Modern-Day Scenario You’ve moved to the cloud – no more backroom servers or managing racks of hardware. Your apps, files, services, and systems are now hosted by global, reliable providers. But there’s still one very real point of failure: your local network. One misconfigured switch, a faulty router, or a dropped…
Read More