Since the COVID-19 pandemic, many companies have adopted hybrid or fully remote work models. As a result, the way we communicate with colleagues has shifted from in-person interactions to electronic communication. Today most companies use instant messaging platforms like Microsoft Teams and Zoom in everyday communication with their coworkers. Cybercriminals are recognizing this shift, and we’re observing an increase in phishing attacks on these platforms.

Many platforms now have the capability to receive messages from outside your organization, which is exploited by attackers to send malicious links and/or attachments just like they would do through emails. Since this feature is relatively new, the expectation is that individuals may assume messages received through the instant messaging platform must be from someone within the organization, and thus trustworthy.

Similar to emails, it is crucial not to trust unexpected messages. Always verify the source and ensure attachments are legitimate before clicking on them.