New Method for Stealing Microsoft Logins Discovered by Hackers

Key Highlights

• Phishing Method: Hackers are using a deceptive link that resembles a legitimate outlook.office.com URL to steal login information.
• Search Manipulation: The attack often starts with a harmful sponsored link in Google search results, like a misspelling of Office 365.
• Security Risks: Even with protective measures, personal information can be compromised through breaches at large companies.
• Recent Incidents: Over 1 million users were affected by a data breach involving the insurance company Allianz Life.

Microsoft users beware: Hackers are using a new method to steal login information.

Bleeping Computer detailed the new technique. Effectively, it uses what appears to be a trusted, legitimate outlook.office.com link to redirect to a phishing page.

Bleeping Computer noted that researchers at Push Security believe the phishing method begins with a malicious sponsored link in Google search results. In at least one instance, a person reportedly landed on the malicious link via a search for “Office 265,” which seems to be a typo for “Office 365.” From there, it would redirect to an Office domain then further redirect to the phishing site.

So, in short, be careful what sponsored links you click. While these links may seem safe, that is not always the case.

This Tweet is currently unavailable. It might be loading or has been removed.

As fast as folks move to protect their information, hackers are often a step ahead. As we wrote earlier this month, for instance, hackers recently found a ransomware workaround to shut down Microsoft Defender, which is the company’s antivirus software.

And even if you do everything right, your info still might get leaked via hacked companies. Just this week, it was revealed that more than 1 million people reportedly had their info stolen in a massive hack of insurance giant Allianz Life.

All that in mind, if you want tips on how to keep your info private, we’ve got you covered.