Hackers Use Fake Outlook Links to Steal Microsoft Logins

Hackers exploit new method to steal Microsoft login credentials, CE Report quotes Kosova Press.

Hackers are using a new technique to steal Microsoft user login information.

Bleeping Computer detailed the attack, which relies on what appears to be a trusted and legitimate outlook.office.com link that then redirects victims to a phishing site.

Researchers at Push Security believe the phishing method begins with a malicious sponsored link in Google search results.

In at least one case, a victim reportedly clicked on the malicious link after searching for “Office 265” — a typo for “Office 365.” From there, the user was redirected first to an Office domain and then further to the phishing page.

Users are advised to be cautious with sponsored links. While they may look safe, this is not always the case. Hackers often stay one step ahead, even as people try to protect their data.

Recently, attackers also found a workaround to disable Microsoft Defender, the company’s antivirus software.

And even if you take precautions, your data may still be exposed through hacked companies. Just this week, it was revealed that the personal information of more than one million people was stolen in a massive cyberattack on insurance giant Allianz Life.