Security News > 2020 > July > Microsoft sues coronavirus phishing spammers to seize their domains amid web app attacks against Office 354.5
Microsoft has taken legal action to seize web domains being used to launch coronavirus-themed phishing attacks.
"Microsoft's Digital Crimes Unit first observed these criminals in December 2019, when they deployed a sophisticated, new phishing scheme designed to compromise Microsoft customer accounts," said the mega-corp in a blog post this week.
The phishing lures included bait text such as "COVID-19 Bonus," said Microsoft.
Upon clicking links provided in the phishing emails, victims were sent to a web app demanding extra permissions.
Redmond has not shied away from legal action over the years, the most high-profile sueball being its ongoing case against the American government to stop agents helping themselves to non-US customer data stored on non-US-based Microsoft servers.
News URL
https://go.theregister.com/feed/www.theregister.com/2020/07/08/microsoft_sues_office_365_phishers/
Related news
- 17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns (source)
- Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice (source)
- Microsoft still unsure how hackers stole MSA key in 2023 Exchange attack (source)
- New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks (source)
- New HTTP/2 DoS attack can crash web servers with a single connection (source)
- Microsoft fixes two Windows zero-days exploited in malware attacks (source)
- TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer (source)
- FBI warns of massive wave of road toll SMS phishing attacks (source)
- Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days (source)
- FIN7 targets American automaker’s IT staff in phishing attacks (source)