Scammers have exploited a loophole in Microsoft's email system, sending spam from an internal address typically reserved for legitimate account alerts.
The address is usually used for legitimate alerts
May 22, 2026
11:50 am
What's the storyScammers have been exploiting a loophole in Microsoft's system to send spam emails from an internal Microsoft email address.
The address, which is usually used for sending legitimate account alerts, has been misused by the fraudsters.
Scammers are abusing an internal Microsoft account to send spam links | TechCrunch
Microsoft, truffatori sfruttano un account ufficiale per rubare i dati degli utenti
Attenzione se ti arrivano e-mail da questo account ufficiale Microsoft: viene usato per inviare spam “credibile”
Attenti a questo account Microsoft: manda email di spam per i codici 2FA
Microsoft Self-Service Password Reset abused in Azure data theft attacks
Active Microsoft Exchange zero-day leaves organisations exposed
Cybercrime service disrupted for abusing Microsoft platform to sign malware
FBI warns Kali365 phishing kit is stealing Microsoft OAuth tokens at scale
Microsoft disrupts cybercrime service offering malware disguised as legitimate software
New Mac Password Stealer Impersonates Apple, Google And Microsoft
