Back Zamin.Uz

Scammers are using an internal Microsoft account to distribute spam

Zamin.Uz • May 21, 2026

For several months, scammers have been exploiting a vulnerability in an internal Microsoft email address intended for sending official notifications. Criminals have been able to register Microsoft accounts as new customers and send fake messages on behalf of the tech giant. This leads users to believe in the authenticity of these emails. This is reported by Techcrunch.com reports .

The attacks are being carried out via the [email protected] address. Typically, Microsoft uses this address to send two-factor authentication codes and important account security alerts. The emails sent by scammers contain subjects fake transaction alerts or false information personal messages, including links to suspicious websites.

The non-profit organization Spamhaus Project confirmed that this issue has been ongoing for several months. Representatives of the organization stated that automated notification systems should not allow users to edit the content of emails so freely. Spamhaus has officially notified Microsoft this risk.

So far, Microsoft has not provided specific information on whether this vulnerability has been fixed. Although a company representative confirmed to TechCrunch that the request was received, they did not provide a detailed on the situation. This is not the first instance of fraud carried out using the systems of major companies recently.

As a reminder, the fintech platform Betterment and the service Namecheap have previously faced similar attacks. At that time, hackers accessed company systems to distribute phishing messages aimed at stealing users' cryptocurrencies and personal data.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Scammers Exploit Microsoft Email System for Phishing Attacks Cybercriminals have discovered a method to exploit Microsoft's internal email system, specifically the [email protected] address, to send phishing emails that appear legitimate. This vulnerability allows attackers to send emails that bypass traditional security filters, as they originate from a trusted Microsoft domain. The emails often contain fraudulent financial alerts or links to malicious websites, targeting enterprise customers who rely on Microsoft's notifications. The exact method of exploitation is unclear, but it involves manipulating Microsoft's automated email systems. The Spamhaus Project has confirmed that this issue has been ongoing for several months, and Microsoft has yet to provide a detailed response or fix. Security experts warn that this could lead to significant risks for users who are conditioned to trust Microsoft notifications. The scope of the impact remains uncertain, but it poses a serious threat to organizations using Microsoft services. 6 sources 66

Extracted Entities

Scammers are using an internal Microsoft account to distribute spam

The full story

Extracted Entities

Attack Types (1)

Companies (3)

Domains (1)

Email Addresses (1)

MITRE ATT&CK (1)