Security News > 2020 > July > Microsoft sues coronavirus phishing spammers to seize their domains amid web app attacks against Office 354.5
Microsoft has taken legal action to seize web domains being used to launch coronavirus-themed phishing attacks.
"Microsoft's Digital Crimes Unit first observed these criminals in December 2019, when they deployed a sophisticated, new phishing scheme designed to compromise Microsoft customer accounts," said the mega-corp in a blog post this week.
The phishing lures included bait text such as "COVID-19 Bonus," said Microsoft.
Upon clicking links provided in the phishing emails, victims were sent to a web app demanding extra permissions.
Redmond has not shied away from legal action over the years, the most high-profile sueball being its ongoing case against the American government to stop agents helping themselves to non-US customer data stored on non-US-based Microsoft servers.
News URL
https://go.theregister.com/feed/www.theregister.com/2020/07/08/microsoft_sues_office_365_phishers/
Related news
- Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail (source)
- New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint (source)
- YouTube warns of AI-generated video of its CEO used in phishing attacks (source)
- Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails (source)
- Microsoft Exchange Online outage affects Outlook web users (source)
- Ukrainian military targeted in new Signal spear-phishing attacks (source)
- Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks (source)
- Microsoft’s new AI agents take on phishing, patching, alert fatigue (source)
- After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot (source)
- Microsoft: New Windows scheduled task will launch Office apps faster (source)