Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users.

The new campaign begins with Teams users receiving an email asking if they would like to participate in a survey. If they open the attached PDF file, they will shortly thereafter receive a voice call purporting to be from Microsoft Support.

The fake support representative then attempts to gain permission to install a remote access tool, and in the process, Ether RAT — a Trojan that gives the scammers full access to the affected computer — is also installed.

After that, it’s a simple matter to steal sensitive data and files from users, reports Bleeping Computer.

...