IT or Help Desk Scam
This Isn’t the Help Desk You’re Looking For.
Let’s say you receive an unexpected call on Microsoft Teams, an app for voice calls, sending messages, and video chats. The call is from a user named “IT SUPPORT” or “Help Desk.” This user’s profile might even have a check mark emoji to make it look official. The caller claims there’s an urgent problem with your computer and that the IT department must fix it immediately.
However, the caller is a cybercriminal and not part of your organization’s IT department. They’re taking advantage of a default setting in Teams that allows users from outside your organization to contact you. If you answer the cybercriminal’s call, they’ll ask you to download software that allows them to access your computer. They can then take control of your computer to steal your passwords, install malware, and even access your organization’s network!
Follow these tips to avoid falling victim to this scam:
Be suspicious of any unexpected calls from IT support. Verify the request is legitimate by contacting your organization’s IT department directly.
Don’t download any software at the request of someone from an unexpected online chat or call. Always stop and think before you select a link!
Never give screen-sharing access or remote control of your computer to someone you can’t verify. Scammers often create a sense of urgency to rush you into making a mistake.
A vigilant workforce is the most effective defense against these attacks. Reach out to access training and simulations that empower your team to recognize and respond to attacks like this one.
