Many people always think of phishing in terms of emails. But in fact, it's all about victims clicking on a link or opening a file with malicious code, regardless of the app. Of course, phishing also works in text messages and chats. And currently, the criminals have discovered Microsoft Teams for themselves.
In Teams, you can also be contacted by external people in chat, which is definitely beneficial for communicating with customers and suppliers. Attackers are now increasingly using this function for phishing attacks. To do this, they register with Microsoft Teams under a fake name. They then research information in social networks and write to their victims via Teams in a very targeted manner, as a supposed supplier, customer or very often as a recruiter.