Security Training
The Help Desk Caller Who Wants Control of Your Screen
What Is Happening
A chat pops up in Teams, or a call rings. The person says they are with IT and can fix a problem right now. All you need to do is share your screen and click Allow, or open a remote help app and type in a short code.
Microsoft counted about 141,000 malicious Teams call attempts from July through September 2026. Its report dated September 2, 2026 traced what happens next. As soon as the employee let the caller in, the caller silently installed a hidden program, and the attackers worked their way toward the company's servers.
The name on screen proves nothing. One rule covers it: support you did not ask for gets no remote access.
Sources
- Microsoft Security Blog, September 2, 2026Impersonating IT Support, How Threat Actors Turn a Remote Session into Enterprise-Wide Access
- Microsoft Security Blog, November 5, 2026Email Threat Landscape, Q3 2026 Trends and Insights
Want This for Your Whole Team?Ask us about security awareness training for your staff.
Ask About Awareness Training