The Canadian Centre for Cyber Security and Microsoft are advising for heightened awareness pertaining to social engineering attacks over Microsoft Teams.
If you receive messages over Microsoft Teams to provide your Multifactor Authentication (MFA) code/number or chat requests from unfamiliar users (e.g. external users masquerading as a technical support or security team), please report Microsoft Teams phishing immediately to is-spam@mcmaster.ca
“McMaster will never ask for your Multifactor Authentication (MFA) code/number.”
(Screenshot of fraud Microsoft Teams chats requested from a Midnight Blizzard-controlled account Source: Microsoft.com)
(Screenshot of fraud Microsoft Teams prompt with a code and instructions. Source: Microsoft.com)
More information and details are available on the Microsoft website: https://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/
Phish Bowl