Microsoft users, please delete emails like the one below, which claim the recipients have violated Outlook terms and service(TOS). This is because the fake emails are being sent by cybercriminals to trick their potential victims into visiting a phishing website that steals email account credentials. The scam works by asking the recipients to click on a link in the emails, which goes to the phishing website. If the recipients attempt to sign into the fake website, their account credentials will be sent to the cybercriminals behind the scam.
The "Outlook You Just Violated our Terms of Service" Phishing Email
From: Outlook Notifications <info28404@m9.coreserver.jp>
Date: Tuesday, November 28, 2017 at 6:55 AM
Subject: You just violated our Terms of Service (TOS) - Rectify
Resent-From: David Mayer <dmayer@asibuildingproducts.net>
Dear
There are some hidden invisible folders in your email that contains malicious contents.
This is currently against our normal terms of services (TOS) and thus is forcing us to take action against you by interrupting your mail service.
These folders are not visible and cannot be removed manually, however it can be removed by following below.
ELIMINATE HIDDEN FOLDERS
Sincerely
© Microsoft Email Center
Once cybercriminals have gotten their potential victims’ account credentials (usernames and passwords), they will use it to hijack their Microsoft accounts and use them fraudulently. Therefore, recipients of the phishing email message (see below) who were tricked into clicking on the link within it and have attempted to sign into the phishing or fake website that they were taken, are asked to change their Microsoft account passwords immediately, before they are hijacked and used fraudulently by cybercriminals.
Hotmail or Microsoft email account users who have received suspicious email messages can verify the authenticity of email messages, but going directly to www.hotmail.com, www.live.com or www.outlook.com and sign into their accounts from there. If there is something wrong with their accounts, they will be notified once they have signed in.