Microsoft Teams FCM Messages

Vendor: Microsoft

Product: Microsoft Teams

Component: Instant Messaging

Date: 27th August 2020

Target: Everyone

What's new

Microsoft Teams users may have received a notification on their mobile device 'FCM Messages : Test Notifications'. This is due to an exploit in Firebase Cloud Messaging (FCM) cross-platform messaging app which Teams and other collaborative software make use of.

A similar message was also received by users of Google Hangouts on 24 August.

How does this affect me?

  • The messages are harmless and more of an annoyance than a security breach.

What do I need to do?

  • Inform your users that if they receive a notification similar to "FCM Test Messages" they can safely ignore it.
  • Do not click the message and leave the notification unopened or delete it.
  • FCM will be patched by Microsoft, Google and other third-parties to prevent this exploit from being further abused.

References

Get in touch

Call us on 0333 000 3210 or Email us solutions@datcom.co.uk

Latest news...