Beware of That “Support Call” – It Could Be a Ransomware Scam Targeting UK Businesses

Emma Challinor

Chief Creative Officer

January 22, 2025

Beware of That “Support Call” – It Could Be a Ransomware Scam Targeting UK Businesses

Picture this: you or a team member gets a call from “Microsoft Teams Support,” offering help with a supposed issue. Sounds helpful, right? Think again. This is the latest tactic used by cybercriminals to infiltrate businesses across the UK.

Scammers posing as “help desk” staff are targeting employees to gain access to devices and networks. The endgame? A ransomware attack—where your business data is locked, and you’re forced to pay a hefty ransom to regain access.

How the Scam Works

These fraudsters are upping their game with sophisticated strategies:

  1. Flood the Inbox
  2. First, they overwhelm an employee’s inbox with spam, making it nearly unusable.
  3. Fake IT Support Call
  4. They follow up with a phone call, pretending to be IT support. Offering to “fix” the problem, they ask employees to install remote desktop tools like AnyDesk or use built-in software like Windows Quick Assist.
  5. Infiltrate the Network
  6. Once inside, the scammers can navigate your network, steal sensitive data, and deploy ransomware that locks your files.

But they don’t stop at phone calls. These cybercriminals are now infiltrating Microsoft Teams with fake accounts designed to look legitimate.

The Microsoft Teams Deception

Using usernames like “Help Desk” and domains such as “securityadminhelper.onmicrosoft.com,” scammers send direct messages via Teams. They claim they need access to fix a problem and urge employees to give them control of their device.

It’s a clever trick that’s caught many businesses off guard.

The Consequences of Ransomware Attacks

Falling victim to a ransomware attack can be devastating for UK businesses:

  • Data Loss: Critical business data may be encrypted or leaked.
  • Operational Downtime: Entire systems can be shut down, grinding operations to a halt.
  • Financial Impact: Paying a ransom doesn’t guarantee full recovery and adds to the costs of rebuilding systems.
  • Reputational Damage: Trust with customers and partners can erode after a breach.
  • Legal Risks: Businesses may face fines or lawsuits for failing to protect sensitive data.

How to Protect Your Business

  1. Educate Your Team
  2. Make employees aware of these scams. Encourage them to verify any unsolicited support calls or messages with your actual IT department before taking action.
  3. Secure Microsoft Teams
    • Only allow external chats from trusted domains.
    • Enable chat logging for added security.
  4. Implement Robust IT Policies
  5. Train staff never to install software or grant access to devices without proper authorisation.
  6. Partner with IT Experts
  7. Work with a trusted UK-based IT support provider to safeguard your systems and train your team to spot scams.

Need Extra Help?

Don’t let cybercriminals get the upper hand. Act now to protect your business from ransomware scams and keep your systems secure.

Article link: https://www.yourtechupdates.com/2024/12/04/beware-that-support-call-it-could-be-a-ransomware-scam/