With 320 million daily users on Microsoft Teams, the ability to connect with colleagues across the organization has never been more seamless… or more targeted.
The shift isn’t just about where we talk; it’s about how we are being attacked. Threat actors moving beyond phishing emails and are infiltrating into the trusted spaces where your employees feel safest.
Starting in 2023, hackers began shifting their focus to Microsoft Teams with massive success, exploiting a high-trust environment where users are significantly more likely to comply with deceptive, urgent requests. By 2025, threat actors introduced callback phishing and voice phishing (vishing) as preferred methods to manipulate employees directly through Microsoft Teams.
Because of the level of sophistication in these attacks, relying solely on native anti-phishing rules has proven risky. Recent logic errors in these heuristic systems have caused significant operational disruptions, mistakenly blocking thousands of legitimate work messages and critical links.
Introducing the Microsoft Teams Phish Alert Button (PAB)
To meet these escalating threats, KnowBe4 is extending our defenses into the collaboration space. The Microsoft Teams Phish Alert Button allows your workforce to remain vigilant outside the inbox and report suspicious activity using the same workflow you’ve already trained them to use.
By adding the Microsoft Teams PAB to your arsenal, your organization gains:
-
Unified Remediation: Treat chat threats with the same rigor as email threats. All reported messages will flow into a single view for your Incident Response team.
-
Identity Validation: In an environment where identity is usually assumed valid, the PAB forces users to stop and think before acting upon urgent requests.
-
Zero-Friction Deployment: Integration requires a simple toggle in the KnowBe4 console and a single zip folder upload to the Teams Admin Center. It’s as easy as deploying your other PABs!
As cybercriminals encroach into the sanctuary of Microsoft Teams, your workforce must be empowered to stay alert and report risky chats in real-time. The Microsoft Teams PAB collapses the vulnerability window and ensures your security team supports, rather than stops, the speed of business.
To get started, download the Microsoft Teams PAB.
