A ransomware gang hid its traffic inside Microsoft Teams so it looked like normal office chatter. The lesson is not to fear Teams. It is that trusted does not mean watched. Keep logs, limit who has de
Machine-generated label — not the source headline.
- When
- Where
- Location unknown
- Category
- cyber · ransomware
A ransomware gang hid its traffic inside Microsoft Teams so it looked like normal office chatter. The lesson is not to fear Teams. It is that trusted does not mean watched. Keep logs, limit who has deep access, and make sure someone is actually looking at the alarms.
Involved actors & entities
People, organizations and places machine-extracted from the source reporting — they power search and the correlation graph. Extracted automatically, so they can include noise, especially on events still marked unverified.
Sources
- Bluesky ↗ · first seen 2026-06-17 10:27 UTC
Defaxon links out to the original reporting and never republishes article text.
Correlated events
Computed by the Defaxon correlation engine — linked by shared actors, co-location, and temporal proximity. Scored hypotheses, never causal claims.