A new phishing campaign is underway that pretends to be an alert from your email server that it has received an encrypted message for you. An example of this is a new campaign that uses the subject line of "Encrypted Message Received" and pretends to be a notice from your mail server stating that you need to login to read an encrypted message. domain.com Encrypted Message Received : You have received and encrypted email from : domain.com View Encrypted Email When a recipient clicks on the "View Encrypted Email " they will be brought to a fake OneDrive for Business page that prompts you to click an Open button view the message. Phishing Scam Landing Page When clicking this button you are brought to another page that pretends to be a OneDrive login form that asks you to login with your "professional email login". Once you enter your email login credentials, the attackers will be able to retrieve it later Email Account Phishing Page As always, when receiving emails that lead to login forms, make sure to examine the URL where the form resides before entering your login credentials.