Microsoft Teams Users Hit by Coordinated Vishing Attacks

A recent threat research report from Palo Alto revealed that hackers have been launching vishing attacks against Microsoft Teams users, compromising companies across multiple industries.

The attackers use an external Teams account to create a chat with a sense of urgency, often claiming to be from internal support units such as the help desk or IT support.

If the user responds, the attacker then calls and guides them through steps to allow remote control or download malicious malware.

This 'Spring Ring' attack targeted over 150 employees between January and April 2026, with hackers using legitimate tools to lull victims into believing the chats and calls were real.