A new phishing campaign is targetting Office 365 users with spam alerts

The attackers have been sending out spam messages through Office 365 and Skype, with one message appearing to come from the Microsoft Security Response Center. The phishing campaign is designed to trick recipients into giving up their login credentials for email or Skype accounts in order of a ‘Microsoft Emergency Service’.

A new phishing campaign is targetting Office 365 users with spam alerts. This email has a link to a fake website that looks like Microsoft’s support site. The email also includes links to download the fake app and install it on your computer.

Alexandru Poloboc is an author.

Editor of the News

Alex spent the most of his time working as a news reporter, anchor, and on TV and radio, with an overriding drive to always get to the bottom of things and find the truth… Continue reading

We haven’t spoken about phishing efforts actively being run by hostile third parties that target Office 365 customers in a long time.

Hackers will stop at nothing to get their hands on your personal data, money, and other valuables, whether it’s in the shape of an urgent reaction type notice or by inserting QR codes to certain emails.

Fake Office 365 alerts urging users to examine prohibited spam communications have recently been used in a new set of phishing attempts with the purpose of acquiring their Microsoft credentials.

When opening Spam emails, be cautious.

If you’ve ever wondered what makes these phishing emails so convincing, we’ve got the answer for you.

Quarantine[at]messaging.microsoft.com is being used by shady third parties to send them to possible targets, with the display name matching the receivers’ domains.

At the bottom of the email, the attackers have added links to Microsoft’s privacy statement and acceptable usage policy, as well as the legitimate Office 365 logo.

It’s really a complex system that instructs the targets to evaluate the quarantined communications within 30 days by going to Microsoft’s Security and Compliance Center through the embedded link.

Instead of being linked to the Office 365 portal, the victims are led to a phishing landing page where they are asked to input their Microsoft credentials in order to retrieve the quarantined spam mails.

Their accounts’ data are transferred to attacker-controlled servers once they input their credentials in the form on the phishing website.

If you fall victim to one of these scams, fraudsters will use your Microsoft credentials to take control of your account and access all of your information.

According to MailGuard, giving fraudsters access to your Microsoft account information gives them unauthorised access to sensitive data such as contact information, calendars, email messages, and more.

It goes without saying what may happen if malevolent third parties get access to your personal information. That is why we constantly advise our readers to be cautious while using the internet.

Have you ever received a scam email like this? Please share your thoughts in the comments box below.

Was this page of assistance to you?

Thank you very much!

There are insufficient details It’s difficult to comprehend Other Speak with a Professional

Start a discussion.

Watch This Video-

A new phishing campaign is targeting Office 365 users with spam alerts. The “microsoft teams phishing campaign” is a scam that targets Microsoft Teams users and tries to get them to enter their credentials into the fake website.

Related Tags

• office 365 phishing email 2020
• office 365 phishing email 2021
• sharepoint phishing attack on office 365 users
• office 365 phishing simulator
• latest phishing attack