There’s a rash of scam spam coming from a real Microsoft address

Summary

Scammers are exploiting a Microsoft Power BI feature to send spam emails from a legitimate Microsoft address. These emails falsely claim charges and direct users to download remote access applications. Security firms have reported similar abuses of other platforms like Google Cloud.

Key Takeaways

1. Scammers are sending spam emails from the legitimate Microsoft address [email protected].
2. The scam involves falsely claiming a charge and directing users to download remote access software.
3. Security firms have reported similar abuses of legitimate services like Google Cloud Application Integration platform.

Statement Breakdown

• Claimed Facts: 70% of statements the article presents as facts
• Opinions: 15% of statements classified as editorial or subjective
• Claims: 15% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article is published on Ars Technica, a reputable technology news website. It cites a security researcher from Proofpoint and references a report from Cofense, adding to its credibility. A Microsoft representative is also mentioned, though their response is pending.

Bias assessment: Informative Security Awareness. The article focuses on informing readers about a specific scam technique and how it leverages trusted services. It maintains a neutral tone, primarily aiming to educate readers about potential security threats and vulnerabilities.

Note: While the article cites credible sources, be cautious of the reported scam techniques and independently verify any suspicious emails.

Credibility flag: Verify Claims

Claimed Facts (7)

• This is a factual statement about the reported issue.
• This identifies the specific email address being used.
• This is a statement of fact based on Microsoft's documentation.
• This is a report from a reader about their experience.
• This is a statement from a security expert.
• This is a report from a security firm.
• This is a specific number reported by a security firm.

Opinions (4)

• This is a subjective assessment of the difficulty of spotting the scam.
• This is an interpretation of the impact of using a legitimate service.
• This is an interpretation of why the voice interaction is effective.
• This is an interpretation of the control the attacker has.

Claims (4)

• The 'presumably' makes this a dubious claim, as it's an assumption about the scammer's intent.
• While technically true, advising users to add an address now used for spam to their allow list is questionable in hindsight.
• This is a generalization about the believability of scams, which can vary greatly depending on the individual.
• This is a subjective assessment of how easy it is to miss the subscription mention.

Key Sources

• Dan Goodin — Author
• Sarah Sabotka — Threat researcher at Proofpoint
• Proofpoint — Security firm
• Cofense — Security firm
• Microsoft — Technology company
• Check Point — Security firm