technology
Scammers Send Emails From Microsoft Notification Address
Scammers have used a loophole to send messages from a Microsoft email address normally reserved for account alerts. The activity has continued for several months, and Microsoft has not yet responded to inquiries about stopping the abuse.
May 21, 7:42 AM·1m read1 source
phonearena.comAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Scammers have sent emails from an internal Microsoft address that the company normally uses for legitimate account notifications. The messages have reached multiple recipients over recent months. com. Recipients reported subject lines that resembled fraud alerts or notifications about private messages.
The Spamhaus Project posted on social media Tuesday that it had observed the same activity for several months. The group stated that automated notification systems should not allow this level of customization. Spamhaus said it has notified Microsoft of the issue.
Microsoft acknowledged an inquiry from TechCrunch earlier this week but has not yet provided a comment on whether the abuse has been stopped.
Similar abuses of company systems have occurred in recent months. Hackers broke into a platform used by fintech firm Betterment earlier this year to send fraudulent notifications about cryptocurrency values. In 2023, hackers used an email account run by Namecheap to send phishing messages. Other users have reported that addresses from additional companies have also been used to send spam.
Transparency
How sources framed this
Single source — no framing comparison available.
CorroborationModerate · 1 source
