Vendor: MicrosoftProduct: Microsoft TeamsComponent: Instant MessagingDate: 27th August 2020Target: Everyone
What's newMicrosoft Teams users may have received a notification on their mobile device 'FCM Messages : Test Notifications'. This is due to an exploit in Firebase Cloud Messaging (FCM) cross-platform messaging app which Teams and other collaborative software make use of.A similar message was also received by users of Google Hangouts on 24 August.
How does this affect me?
- The messages are harmless and more of an annoyance than a security breach.
What do I need to do?
- Inform your users that if they receive a notification similar to "FCM Test Messages" they can safely ignore it.
- Do not click the message and leave the notification unopened or delete it.
- FCM will be patched by Microsoft, Google and other third-parties to prevent this exploit from being further abused.