Recipients of the same message who have already followed the instructions in it should change their email account's password immediately before their accounts are hijacked and used fraudulently.
The "Office365 Email Quota Almost Exceeded" Phishing Scam
From: "Microsoft Office" <email@example.com>
Subject: Office365: Email quota almost exceeded
Date: 19 December 2017 at 11:12:41 CET
To: undisclosed recipients:;
Your storage space for your Office account is almost full.
To prevent your Incoming/Outgoing mail from getting bounced back,
Extend your mailbox quota to prevent permanent loss of incoming messages.
Add 5 gig for free / 1Year
Add 10 gig for 10 / 5Years
© 2017 Microsoft
The link in the fake email message goes to a fake Microsoft Outlook, Hotmail or Live website. On the fake website, visitors will be asked to sign-in, if they attempt to do so, their email usernames and passwords will be sent to the cybercriminals responsible for the phishing email message. Once the cybercriminals have gotten their potential victims Microsoft account credentials, they will gain access to their accounts, hijack the accounts by changing passwords, and use the accounts fraudulently.