Security News > 2020 > July > Phishing attacks aim to steal sensitive data by prompting people to renew Microsoft subscription
The initial scam emails claim that the recipient must renew their Microsoft Office 365 subscription, says Abnormal Security.
In a Friday blog post, Abnormal Security described two separate phishing campaigns, both of which impersonate actual notices from Microsoft.
The goal is to steal sensitive information from the recipients by convincing them that they need to renew their Microsoft Office 365 subscription.
Hosted on a domain called "Office365family.com," which is registered by website builder Wix, the first campaign sends out an email telling the user that Office 365 is now Microsoft 365 and that they should renew their subscription by a certain due date.
In the second campaign, the email warns the recipient that their Microsoft 365 subscription has already expired and that it must be renewed by a certain date.
News URL
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Hackers use FastHTTP in new high-speed Microsoft 365 password attacks (source)
- Microsoft fixes under-attack privilege-escalation holes in Hyper-V (source)
- New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass (source)
- Week in review: 48k Fortinet firewalls open to attack, attackers “vishing” orgs via Microsoft Teams (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks (source)
- Critical RCE bug in Microsoft Outlook now exploited in attacks (source)