Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET
Microsoft 365|Office|Office 365

FCM Messages Blasted out to Teams Customers on Android

We have all been there, one slip of the script and instead of working in the dev environment, you nuke a production server. While this instance isn’t nearly that catastrophic, Microsoft is dealing with an issue of blasting out “Test” messages to Teams users but it’s not entirely clear who is at fault though.

The company is aware of the issue and has indicated that users, only on their mobile device, may receive “Test” notifications that state “FCM Messages Test Notifications” according to TM221041. According to reports on Twitter, these are not one-off instances with reports of up to 10 messages being received. But it may not be Microsoft’s fault (initially), users on Reddit suspect it may be related to Firebase but nothing official is known at this point; Microsoft has stated that this issue only impacts Android users.

If the issue is with Firebase, this is not a vulnerability in Teams but in the notification system for Android. Meaning, it looks like the Android SDK notification service is being hit with the result being non-geniune Teams notifications appearing that are not actually from the Teams app but from a potential weakness in Firebase/Android notification platform.

Image #1 Expand
Microsoft accidentally sent out test messages to Teams users

Christian on Twitter was one such “lucky” recipient and Todd Klindt shared the screenshot you see in this post. If you have users reporting this problem, you are not alone and there is not much that you can do. This is on Microsoft to resolve and hopefully, they will stop sending out these alerts.

Sponsored Content

Say Goodbye to Traditional PC Lifecycle Management

Traditional IT tools, including Microsoft SCCM, Ghost Solution Suite, and KACE, often require considerable custom configurations by T3 technicians (an expensive and often elusive IT resource) to enable management of a hybrid onsite + remote workforce. In many cases, even with the best resources, organizations are finding that these on-premise tools simply cannot support remote endpoints consistently and reliably due to infrastructure limitations.

While this is not the most significant issue to impact Teams, having test overlap with production is always a bit concerning about what other gremlins are making their way to production; no other major issues for Teams are being reported at this time.

To stay updated on this issue (and any others), login to your admin portal and click Health in the left rail and then on Service health.

Related Topics:

BECOME A PETRI MEMBER:

Don't have a login but want to join the conversation? Sign up for a Petri Account

Register
Comments (1)

One response to “FCM Messages Blasted out to Teams Customers on Android”

  1. <p>Hi Brad,</p><p>I’m not sure this is (or was originally as its been going on for a few days across various services including Google, etc) Microsoft pushing these messages in error, it looks like it might be part of an exploit confirmed a few days ago by a researcher.</p><p>Many services are reporting the same thing and reddit is full of people expressing their happiness to receive such messages at all hours of the day/night across multiple services not specific to Microsoft.</p><p>Hope that helps. Cheers. J.</p>

Leave a Reply

Brad Sams has more than a decade of writing and publishing experience under his belt including helping to establish new and seasoned publications From breaking news about upcoming Microsoft products to telling the story of how a billion dollar brand was birthed in his book, Beneath a Surface, Brad is a well-rounded journalist who has established himself as a trusted name in the industry.
Live Webinar: Active Directory Security: What Needs Immediate Priority!Live on Tuesday, October 12th at 1 PM ET

Attacks on Active Directory are at an all-time high. Companies that are not taking heed are being punished, both monetarily and with loss of production.

In this webinar, you will learn:

  • How to prioritize vulnerability management
  • What attackers are leveraging to breach organizations
  • Where Active Directory security needs immediate attention
  • Overall strategy to secure your environment and keep it secured

Sponsored by: