Office 365 Phishing Scam On Laptop Screen
Home ScamsPhishing Scams ‘Verify Office 365’ Phishing Scam Email

‘Verify Office 365’ Phishing Scam Email

by Brett M. Christensen

According to this “verification” email, which purports to be from Microsoft’s Office 365, your email address needs to be updated to the 2020 version.

The message warns that your account will be blocked or suspended if you fail to update correctly. It instructs you to click a link to complete the verification and update.

However, Microsoft did not send the email and it has no connection to Office 365.

In fact, the message is a phishing scam designed to steal your Office 365 login credentials. 
Clicking the update link opens a page hosted on Google Forms that asks for your username, email address, and password.

If you complete and submit the form, the information you have entered can be collected by criminals and used to hijack your account. Once they have gained access, the criminals can use the account to distribute fraudulent material in your name,  access documents you have stored online and commit further fraudulent activities.

Of course, Microsoft would never use a login form supplied and hosted by rival Google. Nor will they ever send you an email demanding that you click a link to log in and update account details. It is always safest to login to your online accounts by entering the address into your browser’s address bar or via a trusted app.

Ironically, the Google Form that the scammers have used to host their fraudulent login form has the following warning at the bottom:

Never submit passwords through Google Forms.

A screenshot of the scam email:

Office 365 Phishing Scam Email

A screenshot of the scam login form:

Office 365 Phishing Scam Form

A transcript of the scam email:

OFFICE 365

Your e-mail needs to be updated with our newly released 365-Secure Internet
Security 2020 version of a better resource web-mail spam and
viruses update.

Failure to update correctly will process your email account being temporarily
blocked or suspended from our network

To complete verification and update , click here.

Thanks,

LocalHost