Malwarebytes has released a report that exposes a "malvertising campaign" to steal passwords from Microsoft Teams for Mac users.
- Fake Zoom, Skype and Google Meet Sites Are Spreading Malware
- Microsoft Disables Own Software Tool to Safeguard Against Malware
- Skype Accounts Being Hacked to Spread Malware, Teams Also Targeted
Many Mac users feel relatively invulnerable to attack while using an Apple computer and the data does suggest that there are far fewer security breaches on Mac operating systems.
Mac users beware, however, that hackers appear to be encouraging Mac users to download a fake version of Microsoft Teams, which is really Atomic Stealer malware designed to steal passwords from Apple keychains and web browsers.
Users came across these fake Microsoft Teams download sites due to a compromised Google ad account in Hong Kong, which allowed the hackers’ links to be placed at the top of search results for the video conferencing and collaboration software.
One of the top voices in cybersecurity, Bob Carver, Principal Cybersecurity Threat Intelligence and Analytics at Verizon, took to LinkedIn to warn others of the latest findings: “Macs under threat from info-stealing malware — don’t fall for this Microsoft Teams scam.
“New advertising campaign uses Teams to spread the Atomic Stealer malware.
“When looking for new software online, you never want to click on the first search result as you could be dealing with fake ads spreading dangerous malware.
“As we saw with the Arc browser in a recent Poseidon campaign, hackers are once again using fake ads to direct unsuspecting Mac users to malicious sites hosting malware.
