Beware of phishing attempts using free email urls

Be wary of the safeguard of moving your cursor over a url in an email message to confirm the link is to a safe domain before clicking on it. Microsoft’s Threat Intelligence team has issued a report warning that links to free email domains have commonly been used to redirect users to a malicious url.

Microsoft reports that phishing attempts using this technique commonly use certain phrases in the subject line such as ‘Report Status’; ‘Zoom Meeting’; or ‘Password Notification for’ followed by the recipient’s domain.

CAPTCHA verification can actually be a tool used by the attackers to prevent automatic f

scanning of the malicious content.