Watch out - this fake Microsoft Teams app is actually dangerous malware, here's how to stay protected

Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.

• Attackers use compromised GMX Mail accounts to send fake Microsoft Teams invites with OAuth traps
• Victims who authorize the malicious Azure Web App grant access to email, files, and persistent account control
• Abnormal AI urges vigilance: verify senders, inspect links, and beware urgent meeting requests

Fraudsters are sending victims fake Microsoft Teams meeting invitations in a bid to steal ogin credentials and achieve persistent access across the Microsoft 365 ecosystem, experts have warned.