Microsoft Teams Voice Calls Exploited to Spread Matanbuchus Malware

TL;DR

Cybercriminals are exploiting Microsoft Teams voice calls to distribute the Matanbuchus malware by impersonating IT helpdesk personnel. This targeted social engineering attack highlights the evolving tactics used by threat actors to infiltrate corporate networks.

Microsoft Teams Voice Calls Exploited to Distribute Matanbuchus Malware

Cybercriminals have recently been observed leveraging Microsoft Teams voice calls to spread the Matanbuchus malware. This sophisticated campaign employs social engineering tactics, where attackers impersonate IT helpdesk personnel to trick unsuspecting users into downloading and installing the malicious software¹.

Understanding the Attack Vector

The attack begins with a voice call on Microsoft Teams, where the threat actors pose as IT support staff. They guide the targeted users through a series of steps, ultimately leading them to download and execute the Matanbuchus malware loader. This loader then facilitates the installation of additional malicious payloads, compromising the security of the affected systems¹.

Impact and Implications

This attack underscores the growing trend of cybercriminals exploiting trusted communication platforms to distribute malware. By targeting Microsoft Teams, a widely used tool in corporate environments, attackers can potentially gain access to sensitive information and critical systems. Organizations must remain vigilant and educate their employees about such social engineering tactics to mitigate the risk of similar attacks¹.

Conclusion

The use of Microsoft Teams voice calls to spread the Matanbuchus malware highlights the evolving strategies of cybercriminals. As remote work continues to be prevalent, organizations must bolster their cybersecurity measures and ensure that employees are well-informed about potential threats. Staying proactive in identifying and addressing such vulnerabilities is crucial for maintaining a secure digital environment.

Additional Resources

For further insights, check:

• BleepingComputer Article on Matanbuchus Malware

1. BleepingComputer (2025). “Microsoft Teams voice calls abused to push Matanbuchus malware”. BleepingComputer. Retrieved 2025-07-17. ↩︎ ↩︎² ↩︎³