Microsoft users who have received email messages like the one below, which claim that they should upgrade due to recent security incidents online, should delete them. This is because the email messages are phishing scams. The phishing email messages are being by cyber criminals to trick their potential victims into clicking on the within them that go to a fake Microsoft website. Once on the fake website, visitors will be asked to sign-in with their Microsoft account credentials (username and password). But, any attempts to sign into the fake website will send their credentials to the cybercriminal behind the scam.
A Sample of the Phishing Microsoft Scam
From: Mail Team <sabitujoe@outlook.com>
Sent: Tuesday, May 23, 2017 8:43 PM
To: Outlook
Subject: MlCROSOFT UPDATE ALERT
Security update info
We are asking all user to upgrade due to recent security incidents online.
This is for your own safety to continue using your account,
click the Update button below.
UPDATE NOW
To opt out or change where you receive security notifications, click here.
Nοte: Your account will be closed if not updated within 48-hours.
We apologize for any inconveniences
Thanks,
Once the cybercriminals have gotten their potential victims' Microsoft account credentials, they will gain access to their accounts, hijack them, and use them fraudulently. Hijacked accounts that are used fraudulently will be blocked by Microsoft, therefore, Microsoft users who have been tricked by the phishing scam are asked to change their passwords before their accounts are hijacked.
Microsoft users whose accounts have already been hijacked may follow the instructions below to recover their accounts:
- Go to https://login.live.com/
- Enter your email address and click the "Next" button
- Click the "Forgot my password" link
- Click "I think someone else is using my Microsoft account" link
- Follow the rest of the instructions
Remember, never click on a link in an email message to sign into your Microsoft account. Always go directly to www.hotmail.com, www.outlook.com, or login.live.com to sign-in instead. After signing in, important notifications, changes or updates will be shown to you, if there is any.