Users are purportedly receiving sextortion emails via the Microsoft 365 Admin Portal, claiming that their PC, tablet, or smartphone has been infiltrated in order to capture images or videos of them indulging in sexual behavior.
Sextortion email scams are more common than you might think, regardless of their age, although the bulk of these letters end up in spam. Scammers have adapted the original principle in recent years. These scam artists can claim to have photographs or recordings of your spouse cheating or of you in your home. To refresh your recall, these frauds first appeared in 2018 and stole between $500 and $5000 from unsuspecting consumers.
According to a recent research by Bleeping Computer, scammers are now using the Microsoft 365 Admin Portal to bypass spam filters and other security measures. It goes on to state that these emails come from "0365mc@microsoft.com," which, while initially appearing to be a bogus address, is actually the email address that the tech giant uses to send notifications and messages to customers.
It looks like these emails are coming from a real Microsoft Account.
The Microsoft 365 Admin Portal includes a facility called Message Center, which notifies users about new features, upgrades, and service alerts. Users can include a customized message of up to 1,000 characters with these "service advisories" for others. As it happens, threat actors are using this feature to send sextortion messages after breaching the limit. Furthermore, the scammers appear to have automated the entire advisory-sharing process, making it easier and more flexible to distribute these alerts.The picture depicts the user receiving an email from Microsoft's official email address informing them of changes in email service notifications. The scammers then included a personal note claiming to have photos or videos of the customer in compromised settings. Users are also told in the email that they must deposit $2000 in Bitcoin to the wallet listed below.
If you receive an email like this from Microsoft, it's likely a scam, so avoid clicking on links or sending money to unrecognized bank accounts or cryptocurrency wallets. Microsoft responded to Bleeping Computer's reply by saying it is currently investigating the scam. According to the site, the computer behemoth has yet to patch the flaw that permits scammers to send such messages.
For more information on IT Services, Web Applications & Support kindly call or WhatsApp at +91-9733733000 or you can visit https://www.technodg.com