Digitaltrends

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

First seen 2 Nov 2025, 16:57 UTC • Theregister

•25.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Rhysida ransomware gang is exploiting fake ads for Microsoft Teams to distribute malware. Users searching for Microsoft Teams may encounter these deceptive links, which lead to data exfiltration or encryption demands. This campaign targets individuals, schools, and small businesses, leveraging a ransomware-as-a-service model.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Continue Reading

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions Critical Vulnerabilities in ConnectWise ScreenConnect Exploited in Active Attacks Node.js Exploited in Ransomware Attacks Using EtherHiding Technique Revival of Black Basta Tactics: Targeting Executives with Automated Phishing The Gentlemen Ransomware Group Exploits Fortinet Flaws and AI Tools New Mistic Backdoor Linked to Ransomware Access Broker Activity

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading