A threat actor is distributing trojanized Microsoft Teams installers that deliver a multi-stage loader and backdoor. The article does not provide a CVSS score, specific affected or fixed software versions, or recommended workarounds.
2026-05-04 (Back to Inventory) Lorem Ipsum Malware: Trojanized MS Teams Installers Deliver Multi-Stage Loader and Backdoor Author(s): Joshua Green , Thomas Elkins Organization: BlueVoyant win.lorem_ipsum Open article directly Related Articles 2026-02-24 ⋅ BlueVoyant ⋅ Joshua Green , Patrick Mchale Mercenary Akula Hits Ukraine-Supporting Financial Institution RMS 2024-05-10 ⋅ Rapid7 Labs ⋅ Evan McCann , Thomas Elkins , Tyler McGraw Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators Black Basta Black Basta Cobalt Strike NetSupportManager RAT 2023-08-31 ⋅ Rapid7 Labs ⋅ Evan McCann , Natalie Zargarov , Thomas Elkins , Tyler McGraw Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers FAKEUPDATES Amadey HijackLoader Lumma Stealer SectopRAT