New Delhi: After the recent major technical glitch in Microsoft’s services, cybercriminals have now started targeting users. Hackers are sending fake emails in the name of Microsoft 365 and Outlook. It is being claimed in these messages that the emails stopped due to server failure and will be deleted forever in the next 24 hours. Users are being asked to click on the given link to get the email back. Microsoft has issued a warning regarding this phishing campaign. According to the company, attempts are being made to steal login credentials of users through these fake links.
How is fraud working in the name of Microsoft 365?
According to Microsoft Threat Intelligence, cyber criminals are copying the company’s official service Health Notification. These emails appear to be genuine and also mention the recent service outage of Microsoft 365.
Some fake messages say that emails stopped during the outage will be deleted within 24 hours. To save them, users are asked to restore their account by clicking on a link. In this way, an attempt is being made to trap people by creating haste and fear.
How to identify fake emails?
Microsoft said that in the subject of these fake emails, a code of six letters and numbers is given after ‘Outage’. At the same time, words like ‘Outage Notification’ or ‘Service Health’ are used in the name of the sender, so that the message appears official.
The company has identified three suspicious domains associated with this campaign. These include moments-notice.com, planetmaison.com and newbooker.com. Such links are provided in these emails, which can take users to suspicious websites.
Can users’ passwords and personal information be stolen?
According to Microsoft, this campaign is related to credential phishing. Its main objective is to obtain the login ID and password of the users. If a person clicks on such a link and enters his information, his account may be in danger.
However, the company has not yet confirmed how many account information cyber criminals have succeeded in stealing or whether malware has been delivered to any device.
How can Microsoft 365 users avoid this scam?
Microsoft has advised users not to click on unknown links in emails. If any message warns of account closure or email deletion, first check its authenticity.
- Do not click on suspicious links received through email.
- Do not enter your password or login details on any unknown website.
- Check service-related information on the official Microsoft 365 admin center.
- Report suspicious emails and delete them.
- Enable Multi-Factor Authentication (MFA) on your account.
Microsoft also advised organisations to check suspicious emails and links through Defender security tools.
