New Email Scam Pretending to be Office 365!
New Phishing Scam
There is a new phishing scam on the rise pretending to be Office 365 Team warning people that there has been an unusual amount of file deletions occurring on their account.
This scam states that a medium-severity alert has been triggered and there has been a high amount of files that have been deleted which they should review.
If you click on the “View alert details” link, you are brought to a fake Microsoft account login page.
As this page is hosted on Azure, it shows that it is secured with a certificate signed by Microsoft. This adds a layer of legitimacy to the this elaborate scam. Azure is increasingly being used by scammers for this very reason.
When you enter your password, the email address and password is sent to the fake web page that was created by the hacker where they can then retrieve your credentials.
You are then redirected to the legitimate https://portal.office.com website where you will be prompted to log in again.
How Can I Avoid Being Scammed?
It can sometimes be hard to tell what is a scam and what isn’t.
- If a URL looks suspicious, don’t click on it. Type in the page you are trying to access through Google to get the direct link.
- Microsoft accounts and outlook.com login forms will be coming from microsoft.com, live.com and outlook.com domains only.
- Avoid clicking links in suspicious emails or downloading any content within the email. If you are suspicious of a strange email, contact an IT specialist like us to look into it for you.
If you have any security concerns or you have been receiving many of these suspicious emails, call itro on 1800 10 3000 or email email@example.com for your FREE IT assessment and chat with one of our experts on how we can help you with your businesses IT.