Credential Theft

Microsoft

626e00c5eff5e1182541c7d7 microsoft cp 20220419

626e00c7e7a3492f44679163 microsoft cp 20220419b

External Compromised Account

Expired Account

Credential Phishing

Link-based

One Time Password Authentication For Microsoft 365 	 	  	 Your password is set to expire on Tuesday, April 19, 2022.    User ID: [Target Email Address] Please take immediate action to avoid being log out permanently.Keep Same Password Sincerely, Microsoft Corporation‍

SharePoint Fake Document Credential Phishing Attack

Navy Federal Credit Union Account Update Credential Phishing Attack

Executive Impersonation Fake Email Chain Payment Fraud BEC Attack

Executive Impersonation Payroll Diversion BEC Attack

Homepage

The Abnormal Attack Vault

Microsoft Expired Account Credential Phishing Attack

Breadcrumbs

Discover the tactics, goal, and vector of a real-world email attack blocked by Abnormal Security.

description

https://intelligence.abnormalsecurity.com/attack-vault/link-based-microsoft-credential-phishing-attack

referrer

robots

{"title":{"title":"Abnormal Intelligence | Microsoft Expired Account Credential Phishing…"}}

This link-based attack impersonates Microsoft using an external compromised account and an expired account theme to steal credentials.

Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.

Abnormal Intelligence Email Subscribe

Top Bar

New BEC Insights from Chris Krebs, Former Director of CISA

Microsoft Expired Account Credential Phishing Attack

Email Content

Subject

Body

Analysis Overview

Type

Vector

Goal

Tactic

Theme

Impersonated Brands