Anatomy of a Phish

We spend a lot of time talking about phishing emails and with good reason. With every passing day, phishing attacks are becoming more sophisticated, and consequently, we have seen their success rates improve. With this said, let’s take a closer look at a few example emails which claim to be from Microsoft and target Office 365 users: 

Example 1

Example 2

As always, remember that if you have the slightest doubt or hesitation about an email or request, don’t act on it. It’s simply not worth it. If you think it could be legitimate, pick up the phone and call the requestor after obtaining the contact information through external means (i.e. do not respond to the email or call a phone number listed in the email.)