Start a Conversation

Unsolved

10 Elder

 • 

44.4K Posts

27

June 22nd, 2024 20:08

Outlook security bug reported

Researcher found a bug that allows anyone to impersonate Microsoft corporate email accounts, making phishing attempts look credible and likely to trick recipients.  The bug only works when sending the email to Outlook accounts, which has at least 400 million users all over the world.

Microsoft -so far- has dismissed the report, saying it can’t reproduce the findings. So the researcher has taken to X to warn people, fortunately, without providing any tech details about the bug. 

If you use Outlook and get an email claiming to be from Microsoft security, be very careful. Do not provide any personal info...

Read full story at TechCrunch.

3 Apprentice

 • 

15.3K Posts

June 22nd, 2024 21:25

I would be suspicious of any unsolicited e-mail, regardless of the [alleged] sender, that was seeking personal information, or was requesting payment (or payment information)...

and all-the-more-so, if the request was in-any-way pressuring or "threatening" (e.g., "failure to comply immediately will result in suspension of your account/services").   Such pressure is frequently used in schemes that try to impersonate the IRS or Social Security... and often, senior citizens, in panic, fearing tax penalties or loss of income, will quickly give out such personal/financial information to the e-mail sender [or phone agent].   

Pressure that you must pay via a GIFT CARD is a dead give-away of a scam.

I can't count the number of spam e-mails I've received threatening to suspend my Netflix account... and I don't even have one!   People need to remain calm, and analyze the situation, asking:   WHY would Microsoft be contacting me, and WHY would they be asking for the specific information they're requesting?   Use some common sense:   if the e-mail really is from your bank, then they KNOW your account number... there is no need for them to ask you to supply it!   Resist the temptation to "confirm" it for them.   
Even if the e-mail is [allegedly] from a company you DO have business with (e.g., you subscribe to a paid antivirus), one still needs to be cautious --- especially if you're paid-up and not due for a renewal.   If you think it might be legitimate, you should go directly to their webpage [or if you don't know it, independently locate (e.g., Google search) contact information for the company], and try contacting them there rather than through the suspicious e-mail.

(edited)

3 Apprentice

 • 

15.3K Posts

June 23rd, 2024 21:37

Here's a great example of "thinking through" a potential scam.   Copied/pasted from AI is helping scammers outsmart you and your bank (yahoo.com)

"Joey Rosati, who owns a small cryptocurrency firm, never thought he could fall for a scam until a man he believed to be a police officer called him in May.

The man told Rosati he had missed jury duty. The man seemed to know all about him, including his Social Security number and that he had just moved to a new house. Rosati followed the officer’s instruction to come down to the station in Hillsborough County, Fla.— which didn’t seem like something a scammer would suggest.

On the drive over, Rosati was asked to wire $4,500 to take care of the fine before he arrived. It was then that Rosati realized it was a scam and hung up."

10 Elder

 • 

44.4K Posts

June 25th, 2024 03:59

Somebody calls me and says I "missed jury duty", I'd say "That's great news!" and hang up...

No Events found!

Top