<![CDATA[Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails.]]>Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails.

Emails are sent from msonlineservicesteam@microsoftonline[.]com, which is a legitimate Microsoft email used to send out about account notifications, and look like this.

Link Preview ImageLink Preview Image
]]>https://board.circlewithadot.net/topic/de8ceae5-7f94-4df2-8a17-82efed3da117/looks-like-hackers-scammers-asshats-are-abusing-microsoft-s-systems-to-send-out-crude-phishing-messages-as-two-factor-emails.RSS for NodeFri, 15 May 2026 05:29:18 GMTTue, 12 May 2026 15:41:03 GMT60<![CDATA[Reply to Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails. on Tue, 12 May 2026 16:15:52 GMT]]>@zackwhittaker I had this happen to me recently from Google's 2FA

]]>https://board.circlewithadot.net/post/https://meow.social/users/robinsyl/statuses/116562496869744280https://board.circlewithadot.net/post/https://meow.social/users/robinsyl/statuses/116562496869744280Tue, 12 May 2026 16:15:52 GMT<![CDATA[Reply to Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails. on Tue, 12 May 2026 16:02:08 GMT]]>@zackwhittaker Hey now, I got one of these (_same_ use case / example) from Apple's password verification system as well.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/jpsays/statuses/116562442901311405https://board.circlewithadot.net/post/https://mastodon.social/users/jpsays/statuses/116562442901311405Tue, 12 May 2026 16:02:08 GMT<![CDATA[Reply to Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails. on Tue, 12 May 2026 15:59:28 GMT]]>@js @zackwhittaker when the legitimate messages look slopped/like malware, then malware has to look like it too

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/kluthulhu/statuses/116562432410761887https://board.circlewithadot.net/post/https://infosec.exchange/users/kluthulhu/statuses/116562432410761887Tue, 12 May 2026 15:59:28 GMT<![CDATA[Reply to Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails. on Tue, 12 May 2026 15:57:01 GMT]]>@zackwhittaker So hackers/scammers/asshats are crafting messages (checks notes) to appear as if originated from malware/ransomware/scammer/asshat company Viboslop?

Odd people.

]]>https://board.circlewithadot.net/post/https://mastodon.nl/users/js/statuses/116562422749801027https://board.circlewithadot.net/post/https://mastodon.nl/users/js/statuses/116562422749801027Tue, 12 May 2026 15:57:01 GMT<![CDATA[Reply to Looks like hackers/scammers/asshats are abusing Microsoft's systems to send out crude phishing messages as two-factor emails. on Tue, 12 May 2026 15:49:41 GMT]]>@zackwhittaker can we please confiscate Microsoft's domains and have a competent sysadmin run them?

]]>https://board.circlewithadot.net/post/https://infosec.space/users/siguza/statuses/116562393915026361https://board.circlewithadot.net/post/https://infosec.space/users/siguza/statuses/116562393915026361Tue, 12 May 2026 15:49:41 GMT