This is a phishing attempt first reported to CSULB ITS on March 12, 2018.
From: MicrosoftOffice365 <email@example.com>
Sent: Monday, March 12, 2018 1:43 PM
Subject: Microsoft Outlook: Email quota almost exceeded
The fraudulent email claims to be from Microsoft but actually comes from a personal account that was likely compromised. Recipients of the email are asked to click a link to review recent email activity due to the claim that a recent unknown sign-in attempt. CSULB never asks employees to click on a link to review account activity.
Intent of the Email
The phisher/sender is attempting to capture email account credentials for their own malicious purposes. The link goes to a page that is flagged as unsafe by some web browsers, such as Internet Explorer.
Figure 1: Screenshot of the phishing email
View all Phishing Reports: