Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

First seen 2 Nov 2025, 16:57 UTC TheregisterDigitaltrendsWebpronews 80% similarity 25.4

Article Content

Browse articles
ThreatCluster

The Rhysida ransomware gang is exploiting fake ads for Microsoft Teams to distribute malware. Users searching for Microsoft Teams may encounter these deceptive links, which lead to data exfiltration or encryption demands. This campaign targets individuals, schools, and small businesses, leveraging a ransomware-as-a-service model.

ThreatCluster AI

Community

Browse all →