Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads for Malware Distribution

The Rhysida ransomware group is exploiting fake advertisements for Microsoft Teams to distribute malware, specifically targeting users searching for the software. This campaign employs malvertising techniques, leveraging Microsoft code-signing certificates to appear legitimate, and has affected individuals, schools, and small businesses. The group has been active in similar campaigns since at least May 2024.