New SynkLoader malware pushed in Microsoft Teams phishing campaign

August 21, 2026 · BleepingComputer · Severity: HIGH

A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen.

Key Takeaways

A new malware strain called SynkLoader is being distributed through Microsoft Teams phishing campaigns targeting enterprise employees.
The loader delivers secondary payloads including information stealers and remote access trojans to compromised corporate networks.
Organizations should strengthen Teams security policies, restrict external messaging, and educate employees about phishing risks within collaboration platforms.