External Teams Call Impersonating IT Support Persona

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•5

Detects inbound Microsoft Teams calls or chats originating from an external or federated tenant where the caller's display name mimics internal IT support or helpdesk personnel, a technique used in social engineering and vishing campaigns.