Go to listing page

Scammers steal users’ login credentials in a new ‘Unlock Your Microsoft Excel’ scam

Scammers steal users’ login credentials in a new ‘Unlock Your Microsoft Excel’ scam
  • The scam involves scammers sending phishing emails to recipients that state ‘you won’t be able to open your Excel or any document file due to a system delay.’
  • Later the victims are asked to verify their account by clicking on the ‘Configure Excel and PDF Settings’ button.

As people become more vigilant on how to identify and prevent phishing scams, scammers continue to create outlandish campaigns in order to trick people into sharing their login credentials.

Lately, Bleeping Computer has reported that a silly phishing scam that dupes people into believing that their ‘Excel file is blocked’ has been doing the rounds on the internet.

How does it work?

  • The scam involves scammers sending phishing emails to recipients that state ‘you won’t be able to open your Excel or any document file due to a system delay.’
  • In order to access the files, the victims are asked to verify their account by clicking on the ‘Configure Excel and PDF Settings’ button that comes attached within the email.
  • Once the users click on the button, they are redirected to a login form hosted on SharePoint that pretends to be an Excel shared document.
  • This fake login form asks the victims to enter their username and password.
  • When the user enters the login details, the information gets saved for the attackers to access. They can use these stolen credentials for BEC scams or account takeover attacks.

Staying safe

  • Users, as always, should be cautious about emails that ask them to provide their login credentials.
  • Contact system administrator before clicking any links or entering your credentials.
Cyware Publisher

Publisher

Cyware