Security News > 2020 > July > Microsoft sues coronavirus phishing spammers to seize their domains amid web app attacks against Office 354.5

Microsoft has taken legal action to seize web domains being used to launch coronavirus-themed phishing attacks.
"Microsoft's Digital Crimes Unit first observed these criminals in December 2019, when they deployed a sophisticated, new phishing scheme designed to compromise Microsoft customer accounts," said the mega-corp in a blog post this week.
The phishing lures included bait text such as "COVID-19 Bonus," said Microsoft.
Upon clicking links provided in the phishing emails, victims were sent to a web app demanding extra permissions.
Redmond has not shied away from legal action over the years, the most high-profile sueball being its ongoing case against the American government to stop agents helping themselves to non-US customer data stored on non-US-based Microsoft servers.
News URL
https://go.theregister.com/feed/www.theregister.com/2020/07/08/microsoft_sues_office_365_phishers/
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Criminal IP: Bringing Real-Time Phishing Detection to Microsoft Outlook (source)
- Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation (source)
- Microsoft sues 'foreign-based' cyber-crooks, seizes sites used to abuse AI (source)
- Microsoft 365 apps crash on Windows Server after Office update (source)
- Hackers use FastHTTP in new high-speed Microsoft 365 password attacks (source)
- Microsoft fixes under-attack privilege-escalation holes in Hyper-V (source)
- Microsoft ends support for Office apps on Windows 10 in October (source)