---
title: "Impersonation in Action: How Fake IT Support Threatens Your Security"
description: Learn how social engineering exploits IT support impersonation to compromise security and discover Grant McGregor's solutions to protect your organisation from these sophisticated attacks.
image: https://blog.grantmcgregor.co.uk/hubfs/IT%20support%20frustrated.png
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Cyber Security
# Impersonation in Action: How Fake IT Support Threatens Your Security
Grant McGregor Team
27 November 2024 • 3 min read
### In the world of cybersecurity, there are few threats as deceptively simple yet devastatingly effective as social engineering. These attacks exploit the human element - tricking individuals into granting access, revealing sensitive information or performing actions that compromise their organisation’s security.
The sophistication of these tactics is growing, underscoring the importance of robust security measures like Grant McGregor’s [Enhanced Security Service (ESS)](https://info.grantmcgregor.co.uk/say-hello-to-gm-enhanced-security-service) which includes Bitdefender’s Managed Detection and Response (MDR).
### What is Social Engineering?
Social engineering involves manipulating individuals to bypass standard security protocols. Threat actors often pose as trusted figures - such as IT support staff - to deceive victims into granting access to systems or data. Microsoft Teams and Quick Assist, commonly used collaboration and remote support tools, have recently been exploited in these schemes.
### Recent examples of Social Engineering in action
[Bitdefender’s MDR teams](https://www.bitdefender.com/en-us/blog/businessinsights/security-advisory-adversaries-abuse-microsoft-teams-and-quick-assist) have observed campaigns where attackers impersonate IT support personnel on Microsoft Teams. These criminals use seemingly legitimate Teams calls or messages to:
- Query credentials or create new user accounts.
- Send malicious links disguised as internal communications.
- Encourage users to install tools like Quick Assist for remote access, which attackers then exploit to deploy ransomware or other malware.
For example, attackers linked to the Black Basta ransomware group have inundated users with spam messages and phishing attempts, pretending to resolve “system issues” through these platforms. Once trust is gained, they use Quick Assist to escalate privileges and execute malicious activities.
### Why it matters
These attacks highlight the need for organisations to remain vigilant about seemingly trusted communication tools. Teams and Quick Assist are essential for modern workflows but are also prime targets due to their ubiquity and trusted status within organisations.
Key Risks include:
- **Credential Theft:** Impersonation allows attackers to gather usernames, passwords, or even MFA tokens.
- **Malware Deployment:** Tools like Quick Assist can serve as vectors for ransomware or other threats.
- **Data Leakage:** Sensitive information shared within these platforms can be intercepted if adequate protections aren’t in place.
### How we can help your business
Grant McGregor’s [ESS](https://info.grantmcgregor.co.uk/say-hello-to-gm-enhanced-security-service), which works with Bitdefender’s MDR, offers advanced solutions to detect and neutralise these threats before they cause harm. With monitoring, anomaly detection and rapid response capabilities, ESS provides a shield against evolving threats.
Key Features of Bitdefender MDR:
- **Continuous Monitoring:** Global security operations centres watch for unusual activities, such as unexpected remote access or phishing attempts.
- **Rapid Response:** Pre-approved actions enable swift containment of attacks.
- **Collaborative Intelligence:** Bitdefender collaborates with vendors and researchers to stay ahead of emerging threats.
How to Stay Secure:
Organisations can also adopt best practices to minimise the risks associated with social engineering:
1. **Enable Multi-Factor Authentication (MFA):** Strengthen access controls for Teams and other Microsoft services.
2. **Educate Employees:** Train staff to identify phishing attempts and verify suspicious requests through alternate channels.
3. **Restrict Quick Assist Usage:** Limit this tool to authorised IT personnel and disable it for general users.
4. **Monitor Remote Access:** Use tools like ESS to log and analyse remote access patterns.
5. **Encourage Reporting:** As we discussed in our [recent blog](https://blog.grantmcgregor.co.uk/how-to-develop-an-incident-reporting-culture), organisations need to foster a culture where employees feel empowered to report suspicious activity without fear of repercussions.
Social engineering attacks are a stark reminder that cybersecurity is as much about people as it is about technology. By leveraging Grant McGregor’s Enhanced Security Service, which includes Bitdefender MDR, organisations can stay one step ahead of attackers, safeguarding their assets and reputation.
For more information on our Enhanced Security Service, visit [Grant McGregor ESS](https://info.grantmcgregor.co.uk/say-hello-to-gm-enhanced-security-service) today.
### What next?
Call us: 0808 164 4142
Message us: [https://www.grantmcgregor.co.uk/contact-us](https://www.grantmcgregor.co.uk/contact-us)
[](https://cta-redirect.hubspot.com/cta/redirect/6138324/ee2a578f-e4c7-437c-bcdc-7f04f9d1e161)
[](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.grantmcgregor.co.uk%2Fhow-fake-it-support-threatens-your-security%3Futm_medium%3Dsocial%26utm_source%3Demail)
## Featured posts
Grant McGregor Team
27 November 2024 • 3 min read
## Recent Posts
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501
Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a...
[Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2025-07-01T12:30:30.402Z",
"datePublished" : "2024-11-27T14:42:24.000Z",
"headline" : "Impersonation in Action: How Fake IT Support Threatens Your Security",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/IT%20support%20frustrated.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/how-fake-it-support-threatens-your-security",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor team"
},
"dateModified" : "2024-11-27",
"datePublished" : "2024-11-27",
"headline" : "Impersonation in Action: How Fake IT Support Threatens Your Security",
"image" : {
"@type" : "ImageObject",
"height" : 675,
"url" : "https://cdn2.hubspot.net/hubfs/6138324/IT%20support%20frustrated.png",
"width" : 1200
},
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/how-fake-it-support-threatens-your-security",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://info.grantmcgregor.co.uk/hubfs/GM-logo-399.png"
},
"name" : "Grant McGregor"
},
"url" : "https://blog.grantmcgregor.co.uk/how-fake-it-support-threatens-your-security"
}
```