Skip to main content

Microsoft Teams could have initiated Cyber Attacks

Published on: 27 Apr 2020

Like a lot of chat apps, Microsoft Teams lets colleagues send each other animated GIF images. However, CyberArk researchers discovered that viewing a GIF could let hackers compromise an account and steal data. 

Microsoft has since fixed the security glitch, researchers say.

The flaw involved a compromised subdomain serving up the malicious images. Meaning all a user had to do was view the GIF to allow an attacker to scrape data from their account. 

If left unfixed, the flaw could have led to widespread data theft, ransomware attacks and corporate espionage, the team added.