Aug 27 2020 12:46 AM
A couple of our users received random notifications on the Teams mobile app this morning. The notification states "FCM Message". Anyone have an idea what's going on?
Aug 27 2020 12:47 AM
Aug 27 2020 12:58 AM
I received 5 notifications this morning "FCM Messages Test Notifications!!!!"
seems it is related to an exploit lets hope that Microsoft or Google plug it soon, otherwise I'll be uninstalling the Teams app on my phone.
Aug 27 2020 01:16 AM
Have had 7 in UK over about 15 minutes from 08:00 approx today (27.8.2020).
Clearly widespread and seems to be a Google Firebase vulnerability according to posts on Reddit, etc.
Concerned this may lead to attempts at phishing. Please fix ASAP!
Aug 27 2020 01:23 AM
Aug 27 2020 01:23 AM
@SuleimanDC - It looks like this is related to a known Firebase bug. There are a number of people reporting Teams alerts on Android devices.
Aug 27 2020 01:24 AM
I have also received these messages a little under an hour ago and this problem seems be on a global level.
Seems to me like they should change their token (API key) so that it isn't as easily exploited.
This article was published 17th August 2020 and as far as I can tell is the base idea for these exploits:
https://abss.me/posts/fcm-takeover/
Let us hope that this will be fixed with an update to the apps.
Aug 27 2020 02:57 AM
Aug 27 2020 03:28 AM
Aug 27 2020 03:39 AM
Aug 27 2020 04:10 AM
Aug 27 2020 04:22 AM
@ashleyw1490
Do you have the link for that alert? I would like to see if any updates.
Aug 27 2020 04:23 AM
I too faced the same issue. Today in the afternoon, I received at least 8 notifications- "Test Notificationsss!!!" @SuleimanDC
Aug 27 2020 04:23 AM - edited Aug 27 2020 04:29 AM
If you say so.
Three news articles about this:
The people that found the exploit:
EDIT: I'm also not too hasty to say that something written in a language that isn't the writers native tongue is untrue. Not everyone is blessed with the understanding of all languages in the world
Aug 27 2020 04:28 AM
Aug 27 2020 04:40 AM - edited Aug 27 2020 04:42 AM
if you have access to the office365 admin portal it can be found on this page https://admin.microsoft.com/AdminPortal/Home#/servicehealth
Aug 27 2020 06:24 AM
Also got seven of these, each with more s added to notifications.
Aug 27 2020 08:44 AM
Aug 27 2020 08:48 AM
Hi There,
I am also getting the same alerts from today morning. I have received 14 Notification today.
Its this kind of spam/attack!!!!