Forum Discussion
Is this a Phising mail?
Hi. One of my user received the attached message earlier today. To me it definitely looks like phishing. The user clicked on the "Cancel Closure Process Now" link, and provided email and password ...
Yes, your instincts are right this is a phishing email. If you haven't already, I'd reset the victims account password as it sounds like they submitted their details.
Phishing emails are predominately used to deliver a ransomware payload. Perhaps share these links with the user, as it has good advice from MS on how to spot this types of attacks if you haven't got your own guidance that you can point them to -
https://support.office.com/en-US/article/Protect-yourself-from-phishing-schemes-and-other-forms-of-online-fraud-F84750B4-2F2C-46C3-89F6-E65F7F8C3546
https://www.microsoft.com/en-us/safety/online-privacy/phishing-scams.aspx
https://www.microsoft.com/en-us/safety/online-privacy/scams.aspx