Sample of the "Outlook Account Removal Request" Phishing Scam
From: The outlook.com Accounts <hfg@atl21.hostirst.net>
Sent: Monday, February 12, 2018 5:53 AM
Subject: Your Account is being Terminated Ticket ID [CASE:HTM7294420018]
Hello Dot-cruzkamp,
This is to inform you that your request on: 2018-02-12 08-53-45 to remove your account from outlook.com Servers has been approved and will initiate in one hour from the exact time you open this message.
Ignore this message to continue with email removal or
If this deactivation was not requested by you Please reply to this mail directly without altering the subject.
Regards,
outlook.com
The link in the phishing email message goes to a fake or phishing Outlook website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Outlook users attempt to sign into the phishing website with their usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Outlook accounts will then be used by cybercriminals fraudulently.
Remember, if you receive email messages like these, please go directly to your email account instead of clicking on the links in the email messages. If there is anything wrong with your account, it will be shown to you after signing in. And, if you were tricked by one of these phishing scams, please change your password immediately before your Outlook account is hijacked. If your account has already been hijacked, click here for help regaining access to it.