How can you recognize Fake Voicemail Emails Impersonate Microsoft to Steal Logins and Spread Malware?

How it works

Summary : Cybercriminals are sending fake voicemail notifications by email, spoofing Microsoft branding to either harvest Office 365 / Outlook login credentials on phishing pages or trick victims into installing malware. The NCSC...

Red flags

• : You receive an unsolicited "voice message" or "voicemail" email from a sender or domain that is not an official Microsoft address. The message pressures you to click a link or open an attachment to listen to a message you never actually received. The linked login page looks like Microsoft 365 or Outlook but the URL is misspelled, shortened, or on an unfamiliar domain

What to do

1. 1: Do not click any link or open any attachment in unsolicited voicemail notification emails. Verify any supposed voicemail directly inside your official Microsoft / Teams / Outlook account, never via the email link. Report the message to your IT team or the NCSC reporting form, then delete it
2. 2if you already entered credentials, change your Microsoft password immediately and enable multi factor authentication

Source

FAQ