You need to upgrade now - Office 365 Spam - Watch out!

You need to upgrade now - Office 365 Spam - Watch out! This email is dangerous just because so many

You need to upgrade now - Office 365 Spam - Watch out!

This email is dangerous just because so many of us have an Office 365 account. We are constantly having to take over various company 365 accounts and subsequently move them on to someone else and so fake notifications like this can be enticing.

 

 

If we take a look at the link by hovering over with the mouse arrow - which you should do with any email link before clicking - we see the following:

 

This link is pointing at:

http://office365.com-email-live-common-oauth2.authorize.thegrindtennis.com/

Which is obviously not a Microsoft link.

The website you are taken to is definitely close to the normal login page, with a truly impressive hostname in the address bar to fool you:

 

http://www.login.office365.com-code-b6159368de39251d7a-login.id-107sbtd9cbhsbtd5d80a13c0db1f546757jnq9j5754675732273456.thegrindtennis.com/2017/authorizez9/login.php?sslchannel=true&sessionid=GWuEWXKL6rAe6TKAiGfPvLAyAojwMlishM6eKRZQjA4qtP0MvfC11czCBS9nerQveWKZOJQ7kVxOKyBf

Which we can see here:

 

 

Notice also that there is no padlock to show that this is a secure site and that the site is running on HTTP (at the beginning of the address bar text) instead of HTTPS, indicating there is no secure connection

thegrindtennis.com has been fully compromised and is in bad shape but is not currently being recognised by Chrome or Internet Explorer as a pirate site so be very careful.

If you are not the admin of your Office 365 site then you will never be asked to upgrade - Office 365 upgrades occur constantly in the background without the requirement of your intervention - that is what The Cloud is all about.

If you have any queries, please feel free to drop us a line on the contact form or by chat.

Add comment