Russian cybercriminals posing as tech support on Microsoft Teams are tricking employees into installing ransomware on their networks, according to a report by British cybersecurity firm Sophos. The firm noticed that two separate groups used Microsoft Office 365 to gain access to a victim’s system. The scams seem linked to criminal groups Storm-1811 and FIN7. Sophos recommends that organizations restrict Teams calls from outside organizations and limit remote access applications.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
