Microsoft Teams
Microsoft Teams is an app for video meetings, voice calls, messages and sharing files. It’s made by Microsoft, based in the United States.
Criminals have used its name in fake downloads or scams, so get it only from microsoft.com.
What it is
Teams brings meetings, calls, messages and shared files together. It supports personal accounts and accounts provided by a workplace or school.
It uses your microphone and camera for calls, with permission. Screen recording permission lets it share your screen or a window. Accessibility access supports remote control during screen sharing. Location access supports emergency calling and IT troubleshooting.
Microsoft distributes and maintains the Mac app. Download it from Microsoft's website and keep it updated. With a work or school account, your organisation can retain and search messages, including messages you delete.
Who makes it
Microsoft is a US technology company founded in 1975 and publicly listed since 1986. Its legal name is Microsoft Corporation. Its website is microsoft.com.
Microsoft makes other software with flaws that attackers have used. Its page in Companies lists them.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
The real Microsoft Teams is signed by Microsoft Corporation, Apple team ID UBF8T346G9. A copy signed by anyone else isn’t from Microsoft. HARD’s Mac app checks this for you; to check by hand, open Terminal and run codesign -dv "/Applications/Microsoft Teams.app", and look for that TeamIdentifier.
Its bundle ID, the name macOS knows it by, is com.microsoft.teams2 or com.microsoft.teams. Download it only from microsoft.com, not from an ad or a link someone sends you.
Fakes. Microsoft reported in May 2026 that criminals had distributed fake Teams installers through search adverts and copied download pages since at least June 2025. These Windows installers delivered the Oyster backdoor and sometimes Rhysida ransomware.
What it connects to
In normal use, Microsoft Teams talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
*.teams.microsoft.com | Teams messaging and meetings. |
*.teams.cloud.microsoft | Teams messaging and meetings. |
*.lync.com | Calling and meeting services. |
*.skype.com | Teams communication services. |
login.microsoftonline.com | Work or school account sign-in. |
*.sharepoint.com | Shared files. |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Camera | To send your video during meetings and calls. |
| Microphone | To send your voice during meetings and calls. |
| Screen & System Audio Recording | To share your screen, windows and computer audio during meetings. |
| Accessibility | To let another participant control your Mac when you give them control during screen sharing. |
| Location Services | To identify your emergency calling location and provide location information for IT troubleshooting, depending on your settings. |
Security record
Problems with Microsoft Teams or Microsoft in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| Microsoft issued security updates for Teams flaws that could let attackers gain extra privileges or impersonate others. | ↗ | |
| A flaw in Teams media handling could let a remote attacker run code, affected the Mac app, and was fixed in an update. | ↗ | |
| Researchers reported Mac Teams flaws that could let malicious software reuse its camera, microphone and other permissions; Microsoft fixed the affected Teams components. | ↗ | |
| Microsoft reported that attackers who stole corporate emails also accessed source code and internal systems; it strengthened security controls and said its investigation remained ongoing. | ↗ |
References
- Matrix42: OneDrive, OneNote, Teams, Office — Mac bundle identifiers docs.matrix42.com
- Facts About Microsoft news.microsoft.com
- Download Microsoft Teams microsoft.com
- Use a screen reader to set up Teams for personal and small business use support.microsoft.com
- Teams updates learn.microsoft.com
- Version update history for Teams app deployments learn.microsoft.com
- Microsoft 365 URLs and IP address ranges learn.microsoft.com
- My camera isn't working in Microsoft Teams support.microsoft.com
- My microphone isn't working in Microsoft Teams support.microsoft.com
- Present content in Microsoft Teams meetings support.microsoft.com
- Microsoft Q&A: Teams remote control and Mac Accessibility permission learn.microsoft.com
- Manage location sharing in Microsoft Teams support.microsoft.com
- Manage retention policies for Microsoft Teams learn.microsoft.com
- Exposing Fox Tempest: A malware-signing service operation microsoft.com
- GovCERT.HK: Multiple Vulnerabilities in Microsoft Teams govcert.gov.hk
- ZDI-25-839: Microsoft Teams media handling vulnerability zerodayinitiative.com
- NVD: CVE-2025-53783, including affected Mac versions nvd.nist.gov
- Cisco Talos: Permission-stealing vulnerabilities in Microsoft apps for macOS blog.talosintelligence.com
- Update on Microsoft Actions Following Attack by Midnight Blizzard microsoft.com
- The signature on a real installed copy, read by HARD with
codesign.