Global cybersecurity company Kaspersky has revealed that cybercriminals are deceiving users by using links from Microsoft’s genuine services. During this new fraud campaign, more than 31,000 suspicious emails were blocked in just seven weeks.
According to Kaspersky, the emails detected between August 1 and September 18 appeared to be messages sent by Microsoft. They instructed users to click on a link to update their account information or sign electronic documents.
However, these messages were being used to direct users to fake websites or attempt to transfer malicious software to their devices, creating a risk of personal information being stolen.
How are Microsoft’s genuine services being used?
Kaspersky’s experts discovered that attackers were also using a method to include their fake messages in genuine service notifications through the Microsoft Entra Admin Center. For this purpose, they are potentially taking advantage of low-cost licences or trial facilities.
With this method, a user may receive a verification code from a genuine Microsoft service, while the deceptive message is included in the email’s subject line or signature section. In this way, an email coming from an authentic service can also be used for fraud.
According to Andrey Kovtun, Manager of Kaspersky’s Email Threats Protection Group, cybercriminals attempt to make their messages appear trustworthy by using the genuine services of well-known companies, which can make it difficult for users to identify fraud.
How can users protect themselves?
According to experts, users should exercise caution before clicking on links in such emails, even if the message appears to have come from a well-known company.
It is essential for users to open the relevant company’s official website or application themselves to verify their accounts or update information, avoid suspicious links, and refrain from entering personal information or passwords in unexpected messages.
Kaspersky has also advised businesses to use modern email security systems. According to the company, its various security solutions can help protect business and individual users against phishing and other cyber threats.