Scammers Exploit Microsoft's Internal Email System for Spam Campaigns
For several months, scammers have been exploiting a loophole that allows them to send spam emails from an internal Microsoft email address used for legitimate account alerts. These deceptive messages are sent using the 'msonlineservicesteam@microsoftonline.com' address and mimic official notifications such as two-factor authentication codes or private messaging alerts. The Spamhaus Project, an anti-spam non-profit, has confirmed this abuse and notified Microsoft.
Tickers: $MSFT
Topics: email security Microsoft scams spam