|
New Microsoft-Based Phish Comes From Real Address
Microsoft and it’s users are now being hit with an attack method that has developed from the pre-existing Google version of the same kind. In this scam, fake emails from a "no-reply" address trick users into calling scammers.
Microsoft Windows users are being warned about a new wave of attacks involving genuine-looking emails from “noreply@microsoft.com". These emails thank recipients for a recent purchase they don't recognize, causing panic over a large expense they were unaware of. The trick is that bad actor replace the usual billing information with their own phone number, urging recipients to call for assistance. If the number is called, the victim is asked to install malware or provide online banking details, leading to more severe issues.
The idea is to trick people into tech support lures via panicking them about a large purchase that doesn’t really exist. These tech support lures have surged by 137% in 2025, so are becoming more common. Users are advised to delete such emails immediately to avoid falling victim to these sophisticated scams.
What really makes these specific attacks so much more dangerous is that these are coming from
legitimate email addresses and are designed to look almost exactly like a real purchase email would. It is still unknown how the bad actors have managed to send as these no-reply addresses.
| 
