Recipients can spot the fraud attempt easily
A phishing campaign aims at harvesting financial information from gullible recipients who believe the email to be genuine and that it comes from Microsoft.
The messages are clearly directed at users that purchased at least one Microsoft product and they are delivered in HTML format, which may make it appear legitimate, as images are also supported.
The subject is simple and announces the recipient that they need to confirm the billing address by June 30. This line has been employed in phishing scams targeting users of various services and should ring the alarm bells straight away.
Return email address reveals the scam
MillerSmiles caught a sample of the email and marked it with a medium-high risk, meaning that the potential number of victims it can make is quite elevated.