Phishing Attack Alert:
Office 365 users are being targeted in a highly convincing phishing attack. An email pretending to be from Office 365 asks users to verify their credentials and mentions a request to deactivate their account. While the email may look legitimate, there are several red flags you need to watch for.
Key Red Flags
1. Sender’s Address
The ‘From’ address is not from a Microsoft Office 365 domain. Always check the sender’s address carefully.
2. Subject Line
Office 365 alert emails will specify the purpose of the email in the subject line, such as “Your Credit Card is About to Expire” or “A Request to Deactivate Your Account Was Made.” Generic subject lines like “Email Notification” should raise suspicion.
3. Urgency Tactics
The email may try to scare you into acting quickly, asking you to click a link and log in before you have time to think about it.
What Happens If You Click the Link
If you click on the link in the email, you will be directed to a fake login page that looks similar to Office 365. Here are the red flags to look out for:
1. URL Mismatch
The URL is not from an office365.com domain. Always check the URL before entering your credentials to make sure you are on the correct website.
2. Predefined Email Address
The email address may be predefined, which is another sign that the email is fake.
3. Password Theft
The fake login page will ask for your password. If you enter it, the attackers will steal your login information.
Immediate Actions to Take
If you’ve entered your password on the fake login page, take the following steps immediately:
-
Change Your Password
Change your password for Office 365 and any other accounts that use the same login information. -
Contact Chill IT
Reach out to Chill IT for further troubleshooting and assistance.
How to Protect Yourself
Here are some tips to reduce the risks of falling victim to phishing:
-
Do not click on any links or attachments in suspicious emails.
-
Delete any odd or suspicious emails right away.
-
Visit Scamwatch at www.scamwatch.gov.au to stay updated on common scams.
-
Be extra cautious with emails from the ATO around this time of year.
What to Do If You Clicked the Link
If you accidentally clicked the link, immediately turn off your PC and contact Chill IT at 1300 726 679 for assistance.
