FuriaHubSecurity3 min read
SynkLoader malware is pushed through Microsoft Teams IT-help-desk phishing
Marcus Hutchins at Expel described a Teams campaign impersonating IT help desk and delivering a fake PowerShell Cleaner MSI hosted on Azure. The loader, first built around July 28, 2026, can drop PhishLocker, a fake lock screen that Alt+Tab reveals as a borderless app.
