Why you should be wary of emails from “Microsoft employees”

fraud A report says they are using Microsoft’s credibility to deceive people. They often pose as employees or affiliated vendors Microsoft – one of the most commonly impersonated brands – to trick email recipients.
Check Point Research claims that security researchers have discovered more than 5,000 emails disguised as Microsoft notifications, indicating that this trend is accelerating. fake email Utilizing “extremely sophisticated obfuscation techniques” that make them “nearly impossible for users to distinguish them from legitimate communications.”

What happened and how it might affect users

according to Internet security The company said the fake Microsoft emails did not originate from private or unknown domains, which is essentially a clue to the potential threat of these emails. They discovered that the emails appeared to come from organizational domains posing as legitimate administrators.
When it comes to the body of the email, the most important part of the content “often includes a fake login page or portal, where malicious content may be hidden.” An unsuspecting user can click this button and enter sensitive information or download a threat.
“To hide the malicious intent of these emails, cybercriminals are deploying sophisticated obfuscation techniques. Some emails contain copied and pasted Microsoft privacy policy statements, helping to create an authentic ‘look and feel,'” it said .
These emails may also contain links to Microsoft or Bing pages, making it more difficult for traditional security systems to effectively identify and mitigate these threats.
Now, clicking on these links or entering sensitive information on these fake pages can have significant consequences for a business. Compromised emails can lead to email account theft, ransomware, information theft, or other negative consequences.

How users and businesses can stay safe

A range of measures can help individuals and businesses avoid these email-based threats. These include awareness training, artificial intelligence-driven Email security and rapid software patching.

Contents

What happened and how it might affect users How users and businesses can stay safe

!(function(f, b, e, v, n, t, s) { function loadFBEvents(isFBCampaignActive) { if (!isFBCampaignActive) { return; } (function(f, b, e, v, n, t, s) { if (f.fbq) return; n = f.fbq = function() { n.callMethod ? n.callMethod(...arguments) : n.queue.push(arguments); }; if (!f._fbq) f._fbq = n; n.push = n; n.loaded = !0; n.version = '2.0'; n.queue = (); t = b.createElement(e); t.async = !0; t.defer = !0; t.src = v; s = b.getElementsByTagName(e)(0); s.parentNode.insertBefore(t, s); })(f, b, e, 'https://connect.facebook.net/en_US/fbevents.js', n, t, s); fbq('init', '593671331875494'); fbq('track', 'PageView'); };

function loadSurvicateJs(allowedSurvicateSections = ()){ const section = window.location.pathname.split('/')(1) const isHomePageAllowed = window.location.pathname === '/' && allowedSurvicateSections.includes('homepage')

if(allowedSurvicateSections.includes(section) || isHomePageAllowed){ (function(w) {

function setAttributes() { var prime_user_status = window.isPrime ? 'paid' : 'free' ; w._sva.setVisitorTraits({ toi_user_subscription_status : prime_user_status }); }

if (w._sva && w._sva.setVisitorTraits) { setAttributes(); } else { w.addEventListener("SurvicateReady", setAttributes); }

var s = document.createElement('script'); s.src="https://survey.survicate.com/workspaces/0be6ae9845d14a7c8ff08a7a00bd9b21/web_surveys.js"; s.async = true; var e = document.getElementsByTagName('script')(0); e.parentNode.insertBefore(s, e); })(window); }

}