Threat Level: High
A recently-discovered Office365 phishing scam pretending to be from the “Office365 Team” is trying to trick users into their log-in credentials.
The alert notifies the user of an unusual volume of file deletions and urges users to review the activity.
When redirected, the users are encouraged to log-in to a page that is hosted on Azure, increasing the perceived legitimacy of the phishing campaign. The hackers have even gone as far as securing the page with a certificate signed by Microsoft.
It’s important to remember that Microsoft login forms will be coming from microsoft.com, live.com, microsoftonline.com, and outlook.com domains only. Be extra watchful for any kind of scam, whether it’s Office365 phishing or otherwise.
If you think you may have been deceived by a phishing scam, it’s important to contact ITonDemand urgently to begin Incident Response.
