Newsletters

Hackers will often send spam messages that are phishing for user’s Office 365 username and password. The email may come in many forms asking you to sign into your account online. It may say your account is going to expire, it may say you have a message waiting for you, it may say there is suspicious activity on your account. It provides a link that takes you to a website that looks almost identical to the Office 365 sign in page. Above is an example going to web address hxxps://www.rsl.org.bd which is definitely not a Microsoft website. The sign in page for Office 365 is https://login.microsoftonline.com.

If a phishing victim were to enter their email address and Office 365 password on one of these fake Office 365 sign pages, it essentially gives the hackers access to the victim’s mailbox.