FAKE Microsoft Login to Hacked Charity Scam
Source: YouTube · John Hammond · published Jun 8, 2023 · 15:58
The video analyzes a phishing email disguised as a Microsoft account verification request that contains a credential harvesting HTML file designed to steal login information 0:00-0:36.
Key Takeaways:
• The phishing email claims Microsoft is updating all email accounts and requires verification within 24 hours to avoid deactivation 0:16-0:34.
• The attached HTML file appears to be a legitimate Microsoft login page but actually sends credentials to a suspicious website (sangabowfoundation.org) 4:42-5:14.
• The receiving website appears to be a compromised WordPress site posing as a charity foundation with lorem ipsum placeholder text and suspicious donation forms 8:14-12:24.
• The presenter notes this phishing attempt has obvious red flags including broken English, incorrect branding, and poor formatting that security training teaches users to recognize 13:08-13:24.
The video demonstrates how cybercriminals use legitimate-looking but poorly crafted phishing emails and compromised websites to harvest user credentials, highlighting the importance of email security solutions.
Sources:
- 0:00-0:36 Introduction to the phishing email claiming to be from Microsoft
- 0:16-0:34 Details of the fake Microsoft account verification scam
- 4:42-5:14 Analysis showing the HTML form submits to a credential harvesting site
- 8:14-12:24 Investigation of the suspicious charity website
- 13:08-13:24 Analysis of phishing red flags and comparison to more sophist
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I received this email and I was sent this email from someone who received this email themselves so their email addresses are redacted but they saw this email of Microsoft cooperation team copyright 2023 all in green here Microsoft 2023 noticed we the Microsoft are updating operation on all email accounts so please kindly verify updating their email address for proper usage and function as attached file still with me verify their email by following the instruction in the above file note in 24 hours this account will be deactivated if not then verified obviously this is a bit of a phishing email this is a scam This Is A Lie this is deception but you probably already knew that of course they're including this cheesy hey Microsoft respect your privacy here's their address try to look legitimat…