The fake "Microsoft Your Account is Out of Date" email below is another reason why Microsoft users should never click on a link in an email to sign into their accounts. The fake email, which claims the recipients' Microsoft account is out of date, is a phishing scam being sent by cybercriminals. The fake email has links that go to a phishing website that steals personal information and account credentials.
Microsoft users should always go directly to https://account.microsoft.com/account to sign into their accounts. Once they have signed, they will be notified of important updates or changes.
The "Microsoft Your Account is Out of Date" Phishing Scam
Onderwerp: Your account is out of date
Van: Microsoft MSA
OneDrive
Account ID: 6749253613
Email ID:
Date: 03.05.2018
To help protect your email account and your personal data, we ask you to update your Microsoft account security information associated with this account.
You have seven days to do it. If you no longer have access to your security information, you will have to fill out a support request
Update Account
Microsoft respects your privacy. To learn more, please read our Privacy Statement.
Microsoft Corporation, One Microsoft Way, Redmond, WA, 98052
The links in the fake email go to the following fake Microsoft website:
hxxps://login.microsoftacount.com/
Once the visitors to the phishing or fake Microsoft website attempt to sign-in, their personal and account credentials will be sent to the cybercriminals behind the scam, who will use it to hijack and use their accounts fraudulently.
Microsoft users who have already been tricked by the fake email are asked to change their account passwords before their accounts are hijacked. For those whose accounts have already been hijacked, are asked to click here for information on how to regain access to their accounts.