Digitaltrends
Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users
First seen 2 Nov 2025, 16:57 UTC
•

•80% similarity
•25.4
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Rhysida ransomware gang is exploiting fake ads for Microsoft Teams to distribute malware. Users searching for Microsoft Teams may encounter these deceptive links, which lead to data exfiltration or encryption demands. This campaign targets individuals, schools, and small businesses, leveraging a ransomware-as-a-service model.
ThreatCluster AI