A New Spam Scam

In yet another new scam, cybercriminals spoof Microsoft Office 365 by using the email address quarantine[at]messaging[dot]Microsoft[dot]com to send you a spam notification. The notification, which is fake, claims that an “important” email with the subject line “[Your Organization’s Domain] Adjustment: Transaction Expenses Q3 UPDATE” has been quarantined. The cybercriminal then asks you to review the email to confirm whether or not it should be marked as spam.

If you click on the Review button in the email, you will be taken to a phony Microsoft Office 365 login page. On this page, you are asked to provide your Microsoft login information to access the supposedly quarantined email. However, any information you enter on this page will be delivered right into the hands of the cybercriminals.

Remember the following tips to stay safe:

• Never click on a link within an email that you were not expecting.
• This type of attack isn’t specific to only Microsoft products or Microsoft users. The technique could easily be used on a number of other programs. Think before you click!
• If you get a notification that you are unfamiliar with, reach out to your administrator or IT department. They can check to make sure the notification is legit.