sircles.net Computer Support The sircles IT blog | You have 6(six) new sharepoint documents - Spam Warning !!

The sircles IT blog Internet Safety & Security, Windows Tweaks and Server Fixes

You have 6(six) new sharepoint documents - Spam Warning !!

18. March 2020 15:54 by sircles in SPAM, Phishing, The Cloud, Office 365
 You have 6(six) new sharepoint documents - Spam Warning !!   This email has been doing th

 You have 6(six) new sharepoint documents - Spam Warning !!

 

This email has been doing the rounds this week:

 


 

Important Sharepoint Document

 

SHAREPOINT  

 You have an important file for your approval on company Sharepoint Storage.

 

 

 

 

 


This takes you to a forwarding website: http://halftime44.sakura.ne.jp/#recipient@company.com which fordards you on to this webpage, which is a fairly convincing Microsoft Email logon:

https://audioxtract.com/ni/login/Login.php?websrc=59c275dc2e97dd3b896ed4ff2b82a8fd&dispatched=36&id=807887631&email=recipient@company.com

Which as you can see has a valid SSL certificate, but no actual website associated with it. The cert is just a free CPanel one and the website itself is registered in the Bahamas to avoid any come back. 

Obviously another attempt to compromise your Office 365/Exchange password.

We tried typing in a few rude messages in case they read the results manually - all for the sake of your safety - but the system says no dice every single time.

Perhaps it routes through to the real O365 to verify? I don't see how they could though.

Anyway, keep an eye on the address bar to make sure you are always typing your credentials into the correct domain name/website.

We have reported the above to the big browser men, who will lock them down soon, but as far as we can tell, GDPR and internet regulations allowing ownership of domains to be withheld just makes it easier and easier for these idiots.

Add comment