A New Ransomware Scam Targeting Businesses
Cybercriminals are ramping up their tactics, and one of the latest threats involves scammers posing as IT support to trick employees into granting access to their devices. This tactic isn’t just a nuisance. It’s a full-scale ransomware attack, locking businesses out of their critical data until they pay a hefty ransom.. Here’s what you need to know about these fake tech support calls, the risks it poses, and how to protect your business from becoming the next victim.
How the Scam Works
These fake “support” calls follow a calculated process designed to deceive even the most cautious employees:
- Email Overload: The attack begins by overwhelming an employee’s inbox with spam emails, rendering it unusable.
- Fake Help Desk Call: Scammers then call, posing as IT support staff, offering to “fix” the issue.
- Remote Access Setup: They instruct employees to install remote desktop tools like AnyDesk or use built-in options like Windows Quick Assist.
- Network Intrusion: Once inside, they move through your network, steal sensitive data, and unleash ransomware.
The scheme doesn’t stop at phone calls. Scammers are now infiltrating Microsoft Teams using fake accounts with names like “Help Desk” or “Security Admin.” They message employees directly, using fabricated domains such as securityadminhelper.onmicrosoft.com to seem legitimate.
The Devastating Impact of Ransomware
Once ransomware is deployed, the consequences can be severe:
- Data Lockout: You lose access to critical business data.
- Operational Disruption: Systems go offline, halting productivity and customer service.
- Financial Loss: Paying the ransom (which is never guaranteed to work) and handling the aftermath costs time and money.
- Reputation Damage: Breaches erode customer trust and may result in legal liabilities if sensitive data is exposed.
Actionable Steps to Protect Your Business
1. Train Your Team
Educate employees on recognising scams:
- Be cautious with unsolicited calls claiming to be from IT support.
- Never install software or grant remote access without verification.
- Verify the sender of Teams messages or emails before responding.
💡 Tip: Regularly conduct phishing simulations and provide ongoing cyber awareness training to your team.
2. Secure Your Microsoft Teams Environment
- Restrict External Access: Limit Teams chats to trusted domains only.
- Enable Chat Logging: Maintain records of all interactions for auditing purposes.
- Use Multi-Factor Authentication (MFA): Add an extra layer of security to accounts.
💡 Tip: Regularly review user accounts and domain permissions to ensure no unauthorised access.
3. Strengthen Your IT Defences
- Deploy endpoint protection to monitor and block malicious activities.
- Use email filtering tools to reduce spam and phishing attempts.
- Invest in dark web monitoring to identify if your business credentials have been compromised.
💡 Tip: Schedule regular vulnerability assessments and penetration testing to identify weak points in your network.
4. Verify Tech Support Requests
Always validate IT-related requests:
- Employees should check directly with your internal IT team or trusted managed IT provider before acting on any support call or chat message.
- Establish a protocol where all support interactions must be logged and authorised by management.
💡 Tip: Post a list of approved IT contacts in a shared location for easy employee reference.
Nxt Steps
Cybercriminals are becoming increasingly sophisticated, but you don’t have to face them alone. By building awareness, securing your systems, and having a trusted IT partner, you can significantly reduce your risk of falling victim to these attacks and spotting fake tech support calls right away.
At Nxt Gen IT, we specialise in robust cybersecurity solutions, from phishing prevention and email security to Microsoft Teams configuration and employee training.
👉 Contact us today to protect your business from ransomware and other cyber threats. Let’s keep your data—and your reputation—safe.
Ben helps growing businesses turn technology into a driver of performance instead of a barrier. At Nxt Gen IT he works with SME leaders, recruiters, and fast-scaling teams to design solutions that improve reliability, strengthen security, and unlock growth.
With a background in email deliverability and cloud systems, Ben specialises in making sure businesses communicate effectively, keep data safe, and get the most from Microsoft 365. His experience spans solution design, managed IT services, and virtual CIO support, always with a focus on practical outcomes that reduce headaches for business owners.
Ben has supported organisations across the UK, from recruitment agencies struggling with inbox placement to SaaS firms scaling fast, and SMEs needing a trusted partner for their IT. He believes tech is never the end goal: growth is. His role is to make sure technology never gets in the way of it.