Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"Microsoft Security Info Update 2018" Phishing Email Scam
Microsoft Security Info Update 2018 Phishing Email Scam

There is no "Microsoft Security Info Update 2018" like the one below. Therefore, Microsoft users who have received the email message below, which claims that their emails will be blocked and they will not be able to read and send emails, and they will no longer have access to their emails, are asked to delete it. This is because it is a phishing scam being sent by cybercriminals to steal Microsoft Hotmail, Live or Outlook usernames and passwords. The fake email message tricks the recipients into visiting a phishing website where they will be asked to sign into their accounts, but any attempt to sign-in to the phishing website will result in their account credentials being sent to the cybercriminals behind the phishing email message.

Sample of the "Microsoft Security Info Update 2018" Phishing Email

From: Account Security <mee.noy2010@hotmail.com>

Date: 13 February 2018 at 07:40:28 GMT

To: "userid@hotmail.com" <userid@hotmail.com>

Subject: Security Info Update 2018

Microsοft

Security Info Update 2018

Dear User

This is to inform you for the final time that on 20th February,2018, We will discontinue support on your account and security.

If you choose not to renew your account on or 20th February,2018, your email will be blocked and you will not be able to read and send emails, and you will no longer have access to your email and many of the latest features for improved, conversations, contacts and attachments.

Take a minute to renew your account for a faster, safer and full-featured experience. Renew below

Renew Your Account

Thanks for using service

Regards,

Customer Member Service

The link in the email message goes to a fake Microsoft Hotmail website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If the potential victims enter their Microsoft Outlook, Hotmail, Live usernames, and passwords on the fake website, the information will be sent to the cyber-criminals behind the email scam, who will use the information to hijack the victims' accounts.

If you receive email messages like these, please go directly to your email account instead of clicking on the links in the email messages. If there is anything wrong with your account or something needs to be done to it, it will be shown to you after you have signed into your account. If you were tricked by one of these malicious phishing scams, please change your Hotmail, Live or Outlook immediately. If you are unable to, click here to report it to Microsoft.

16

Comment sectionComments / Answers (16)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 16

by an anonymous user from: London, England, United Kingdom

I was caught out by the Microsoft security info update yesterday and could kick myself, as this is the first time. I wondered when asked to put in the password (which I could not remember anyway) and just pressed enter and whatever was there in the 'security dots' was accepted. Today I checked and found this scam, so have changed my password and added verification. Am I safe now or not?

Delete


by info

Yes, you should be safe.

Delete


by an anonymous user from: Montgomery, Alabama, United States

I feel like I was scammed a couple weeks ago from 'care-alltimedesk.com'. My home computer locked up and a message flashed on screen to call the Microsoft help team to resolve the issue. I was in a hurry and my gut feeling didn't prevent me from moving forward. It cost me $350 and I'm not sure if they actually did anything but my computer now works. I have the email they sent me for confirmation of fix and payment. Thanks for any info.

Delete


by info

It is a scam. Microsoft doesn't display message asking you to call a third party technical support company when an error occurs.

Delete


by info

Here is another scam:

"From: Mail Server
Sent: Monday, June 4, 2018 2:19:57 AM
To: member_service-outlook.com
Subject: Final Account Update

Account Security Info Update

Your Mailbox will expire on JUNE 06 , 2018


This is to notify you that we are currently updating the windows services agreement and privacy statement.

Please keep your security information updated.

Do not ignore!

UPGRADE NOW

NOTE: YOUR EMAIL ADDRESS WILL BE DISABLED IF NOT UPDATED. (UPDATE IS FREE)

Thank you for using our services."

Delete



by an anonymous user from: Doha, Baladiyat ad Daw?ah, Qatar

If you click the link on accident, would anything happen to your account or will you be fine. As I accidentally clicked the link before realising it's a scam. Thank you

Delete


by info

No, you would have to enter your credentials on the page you were taken to.

Delete


by an anonymous user from: Pasadena, California, United States

I have received two separate email phishing attempts directed at two different email accounts ... a gmail and an Earthlink account ... from a source purporting to be the "Microsoft Account Security Team:

"Microsoft account
Security alert
We think that someone else might have accessed the Microsoft account nf*****-earthlink.net. When this happens, we require you to verify your identity with a security challenge and then change your password the next time you sign in.
If someone else has access to your account, they have your password and might be trying to access your personal information or send junk email.
If you haven't already recovered your account, we can help you do it now.
Recover account
Learn how to make your account more secure.
Thanks,
The Microsoft account team"

When you hover your cursor over the "Recover Account" link box, the URL is simply "live.account.com"

Since I do not have a live.com account and since neither of my two email accounts are experiencing any issues and do not present any warnings or instructions when I sign into them, I feel I can safely assume these are phishing attempts.

The emails appear to be legitimate and are not full
of spelling and grammatical errors as so many phishing attempts often are. However, the instructions do not follow the normal procedure that Microsoft typically does and given that two were of these emails were sent in regard to 2 different, unrelated email accounts and considering that I do not have a live.account.com nor do I have a Microsoft account in consistent use -- I have made the assumption that these are fraudulent phishing attempts. Nor does the green authentication shield from Microsoft appear anywhere in the emails.

I highly recommend that people should be alerted to this current phishing scam.

Delete


by an anonymous user from: Belfast, Northern Ireland, United Kingdom

I am receiving emails like the one above almost daily. At first they were worded slightly different but now they state "from a trusted sender" this raised alarms to me. I thought maybe it was genuine but on forwarding the email to info-onlinethreatalerts.com I was reassured it was a phishing scam. Don't be tempted to open anything suspicious it's not worth risking

Delete


by info

Here is another scam:

"From: Microsoft.com SUPPORTS
Sent: Monday, April 30, 2018 10:31:46 AM
To: securityservice-microsoft.com
Subject: ❶✉ Security info update 30-04-2018 (Action Requested)

This message is sent from a trusted sender

Microsoft account
Security info update
To continue with security update, click the button below.
Continue
This help protects your email from spam
Thanks,
The Microsoft account team"

Delete


by info

Here is another scam:

"From: Email Administrator
Sent: Monday, April 16, 18:37
Subject: Closing of your account is been processed
To: microsoft-verification-outlook.services-inc.com

This message is sent from a trusted sender

FINAL 2018 UPDATE
Attention User,

This message is being sent to you to inform you that your account will expire on 17/04/2018.

If you wish to continue using this account please upgrade to our services. Ignoring this message will cause the account to be closed

Update your account

Note: This upgrade is required immediately after receiving this message

Thank you
Security account team'

Delete


by info

Here is another scam:

-------- Original message --------
From: "Microsoft.com SUPPORTS"
Date: 10/04/2018 4:19 pm (GMT 00:00)
To: secureservices-inc-msn.com
Subject: ❶✉ Security info update

This message is sent from a trusted sender

Microsoft account
Security info update
To continue with security update, click the button below.
Continue

This help protects your email from spam
Thanks,
The Microsoft account team

Delete


by info

Here is another scam:

"Mandatory Mail Service
Account Service
Thu 3/29/2018, 7:45 PM

FINAL 2018 UPDATE
Attention User,

This Message is Sent to you to INFORM you that Your Account will expire on 01/4/2018 .

If you wish to continue using this Account, Please Upgrade to Our Services in 48hours. Ignoring this message will cause the account to be closed.

Update your account

Note: This upgrade is required immediately after receiving this message

Thank you
Security account team."

Delete


by an anonymous user from: Frankfurt, Hesse, Germany

received this one what do think this is?
Microsoft
Your Services Agreement made clearer
Your Services Agreement made clearer
You’re receiving this email because we are updating the Microsoft Services Agreement, which applies to one or more Microsoft products or services you use. We’re making these updates to clarify our terms and ensure that they remain transparent for you, as well as to cover new Microsoft products, services and features.
The Microsoft Services Agreement is an agreement between you and Microsoft (or one of its affiliates) that governs your use of Microsoft consumer online products and services.
You can read the entire Microsoft Services Agreement here. You can also learn more about these updates on our FAQ page here, including a summary of the most notable changes. The updates to the Microsoft Services Agreement will take effect on Ma‍y 1, 20‍18. If you continue to use our products and services on or after Ma‍y 1, 20‍18, you are agreeing to the updated Microsoft Services Agreement.
If you do not agree, you can choose to discontinue using the products and services, and close your Microsoft account before these terms become effective. If you are a parent or guardian, you are responsible for your child’s or teenager’s use of Microsoft products and services, including purchases.
Thank you for using Microsoft products and services.

Microsoft Privacy Statement

Microsoft Services Agreement

Frequently Asked Questions
Microsoft
Microsoft respects your privacy. To learn more, please read our Privacy Statement.
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA

Delete


by info

This one is legitimate.

Delete


by info

Here is another scam:

"From: Microsoft.com Team
Sent: Thursday, February 15, 2018 4:05 AM
To: USER-T-ONLINE.DE
Subject: Account De-activation In Progress (A New Version Is Now Available)

This message is sent from a trusted sender

FINAL 2018 UPDATE
Attention User,

This message is being sent to you to inform you that your account will expire on 18/02/2018.

If you wish to continue using this account please upgrade to our services. Ignoring this message will cause the account to be closed

Update your account

Note: This upgrade is required immediately after receiving this message

Thank you
Security account team"

Delete


waiting