Microsoft Request Verification Scam

▤ Summary

Infosec researchers uncovered another harmful phishing campaign aiming to collect the users login credentials. The fake emails imply that important information regarding a supposed order made by the user is contained in a linked document. to review the data in the documents, users are asked to click on the Verify Your Identity button found in the misleading emails. The visual appearance of the unsafe site may be similar to that of an official Microsoft page or adjusted to match the victims email service provider. They may ask the victims contacts for money, spread malware, disseminate misinformation, or try to further expand their reach by compromising additional accounts connected to the breached email.

▦ Linked Companies

EnigmaSoft

$1M to $5M

Microsoft

$1B+