Cyber firm warns companies to beware of scam email campaigns

Cyber security firm Kaspersky on Thursday cautioned Pakistani businesses about a fraudulent email scheme that abuses genuine links tied to Microsoft services. According to a report issued in Islamabad, the messages send recipients to counterfeit websites or prompt malware downloads. Kaspersky products blocked more than 31,000 such emails between August 1 and September 18.

Kaspersky had earlier flagged a phishing operation that misused Microsoft's sign-in verification process. The new campaign relies on the same technique but uses fake official notices asking users to refresh their credentials or sign documents. Scammers create bogus accounts in the service's user section, then log into Microsoft's account portal and register the victim's genuine address as a recovery mailbox.

The company advised organisations to adopt strong email security tools to defend against such threats. The report shows attackers are repurposing a known authentication mechanism with new lures.