Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Scamming - Fraud
The email message below: "Microsoft account unusual sign-in activity," is a fake. The email message was NOT sent by Microsoft and is a phishing scam created by cybercriminals to steal Microsoft, MSN, Hotmail, Live or Outlook usernames and passwords. Therefore, recipients of the fake email message are asked not to click on the links or follow the instructions in it. Microsoft email users who have received similar emails and who want to know if there is something actually wrong with their accounts, may go directly to www.outlook.com, www.hotmail.com or www.live.com and sign into their accounts. If there is something wrong, or if there is something that needs to be done on their accounts, they will be notified after signing in.
It is recommended that Microsoft Hotmail, Live or Outlook users never click on a link to sign into their accounts. They should go directly to www.outlook.com, www.hotmail.com or www.live.com sign-in from there instead.
From: Outlook Administrator messagecennterdebt@outlook.comDate: September 8, 2016 at 8:46:48 AM EDTSubject: Microsoft account unusual sign-in activityUnusual Activity DetectedWe detected something unusual about a recent activity to the Microsoft account. To help keep you safe, we required an extra security challenge. You will need to verify your Microsoft email account below to confirm that the recent activity was yours and to regain access and enjoy our unlimited service.Verify NowWhat happened?Using a shared computer to access your account.Logging in your microsoft account from blacklisted IP.Not logging off your account after usage.Thanks for using your Microsoft account to bring the people who matter most together in one place. You can change your connection settings anytime and find more ways to connect at businnesmn.com/content/themes/ fourteen/genericons/font/dirrect.php.See you online,The Microsoft team
From: Outlook Administrator messagecennterdebt@outlook.comDate: September 8, 2016 at 8:46:48 AM EDTSubject: Microsoft account unusual sign-in activity
Unusual Activity Detected
We detected something unusual about a recent activity to the Microsoft account. To help keep you safe, we required an extra security challenge. You will need to verify your Microsoft email account below to confirm that the recent activity was yours and to regain access and enjoy our unlimited service.
Verify Now
What happened?
Using a shared computer to access your account.
Logging in your microsoft account from blacklisted IP.
Not logging off your account after usage.
Thanks for using your Microsoft account to bring the people who matter most together in one place. You can change your connection settings anytime and find more ways to connect at businnesmn.com/content/themes/ fourteen/genericons/font/dirrect.php.
See you online,The Microsoft team
The links in the phishing email message go to the following fake and phishing website:
If you were tricked into entering your username and password on the fake MSN / Hotmail / Live / Outlook webpage, please change your password immediately.
Click here to change your password.
33
"Hello, We Have Detected Unusual Activity With Your Windows Account on Your Computer. Login Has Occurred on 08/10/2019 @ 5:23 AM EST From IP: 128.58.457.54 Geo Location Found: Eastern Russia. If This Was Not You Please Call the Windows Security Team at 1-858-451-4210. (Be at your computer) Windows Security Team 1-858-451-4210" Here is another scam.
This appears to be another similar message:"Account unusual sign-in activityHello,We Have Detected Unusual Activity With Your Windows Account on Your Computer.Login Has Occurred on 08/10/2019 @ 5:23 AM EST From IP: 128.58.457.54 GeoLocation Found: Eastern Russia.If This Was Not You Please Call the Windows Security Team at 1-858-451-4210.(Be at your computer)Windows Security Team1-858-451-4210"
Yes, it is another scam.
"From: Microsoft Sent: Tuesday, July 9, 2019 9:52 AM Subject: Microsoft Office 365 Sign-In Activity Make business tasks easier View it online Microsoft Office 365 Sign-In Activity Microsoft takes securing your email service seriously, your mail servers reported unusual email activity we'd like you to address, click to view reports below hxxp://ecyclingusa.com/wp-includes/js/dist/vendor/ View Report Run and grow your business with these apps" Outlook Customer Manager Automatically organizes information, Here is another scam.
Here is another scam: "Security Information Outlook service Today, 7:58 AM Dear subscriber, We have detected an unusual recent connection to your Microsoft account. For security reasons your mail will be temporarily blocked in order to continue using our services, please follow the procedure Click here Thank you for using our services Copyright 2018"
Here is another scam: "From: Outlook.com -Hotmail- Office Support Date: 21 August 2018 at 14:22:31 BST Subject: Temporary error: Email Delivery failed! e-Mail: Unusual sign-in activity Hello, We detected something unusual about a recent sign-in to the Microsoft account. Review recent activity The information in this electronic e.Mail message is private and confidential, and only intended for the addressee. Thanks, Nick Lane MicrosoftOutlook account team"
This must be a scam:"Microsoft account team Unsubscribe12:02 PM (1 hour ago)to me Microsoft accountUnusual sign-in activityWe detected something unusual about a recent sign-in to the Microsoft account ***@gmail.com.Sign-in detailsCountry/region: VietnamIP address: 115.79.32.243Date: 6/15/2018 12:02 PM (PST)Platform: WindowsBrowser: FirefoxPlease go to your recent activity page to let us know whether or not this was you. If this wasn't you, we'll help you secure your account. If this was you, we'll trust similar activity in the future.Review recent activityTo opt out or change where you receive security notifications, click here.Thanks,The Microsoft account team
Just got this one. Different details, but same exact format. Figured it was a scam, email pushed it to my "junk" folder. Just looked over my MS account (not through their "Review Recent Activity" link, of course), everything looks normal. Figured I'd do some additional digging to be sure.Thanks for the info.
I got a similar email (claiming that my account was signed into from Vietnam as well, but a different IP address) - only, my account is with Gmail!They must have gotten something mixed up there...Usually such emails come from Google. I did click the link (silly me!) but didn't enter passwords or anything. Hopefully my computer will be okay...
Yes, you are OK.
Here is another scam: "From: Microsoft Office365 [account-security-noreply@accountprotection.com] Sent: Wednesday, 30 May 2018 1:10 AM Subject: Microsoft account unusual sign-in activity Microsoft account Unusual sign-in activity We detected something unusual about a recent sign-in to your Microsoft Office 365 account with email address . Sign-in details: Country/region: Russia IP address: 213.183.58.12 Date: 9/01/2018 11:32 AM (PST) If this was you, then you can safely ignore this email. If you're not sure this was you, a malicious user might have your password. To help keep you safe, we required you to review your Office 365 E-mail account by sign-in into your Office 365 E-mail account, you will be introduced to new term of Microsoft service agreement that will strengthen the security of your Microsoft E-mail account. Review recent activity We'll help you take corrective action after you review has your Office 365 E-mail account. This message was sent to . To opt out or change where you receive security notifications, click here. Thanks, The Microsoft account team"
