Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords
Attackers impersonate IT help desks in Microsoft Teams to deliver SynkLoader and steal Windows passwords.
74
Malware
SynkLoader
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 24, 2026
- Last mentionedSep 22, 2026
Timeline
4 articles · newest firstHackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords
Threat actors impersonate IT support in Microsoft Teams chats to deliver SynkLoader malware and harvest Windows credentials via fake lock screens.
55
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.
55
Tricky 'SynkLoader' Multitool May Herald Ransomware
Researchers detail SynkLoader, an advanced multilingual multitool that hijacks screens to steal passwords and may precede ransomware attacks.
45
Appears with
- Microsoft Teamsproduct · 3
- Microsoftvendor · 3
- Microsoft 365product · 2
- PhishLockermalware · 2
- Amatera Stealermalware · 1
- Quick Assistvendor · 1
- Quick Assistproduct · 1
- Expelorganization · 1
- ScamDrillorganization · 1
- Rclonevendor · 1
- Windowsproduct · 1
- Microsoftorganization · 1
- Gen Digitalvendor · 1
- Gen Digitalorganization · 1
- WordlistLoadermalware · 1
- Dark Readingorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.