Hackers are exploiting Microsoft 365 to send extortion emails

Over the past week, many users around the world have received extortion emails sent via the Microsoft 365 Message Center.

These emails are demanding users to pay $2,000 worth of cryptocurrency to a specific address, under the threat of stealth nude webcam photos of them being leaked to family members, friends, and colleagues.

Normally, these kinds of emails are supposed to get caught by spam filters, but because they’re being sent via an official Microsoft address, they’ve managed to get through the eye of the needle.

It’s not entirely clear how these hackers managed to send the extortion emails as of this writing, but according to BleepingComputer, the incident is currently being investigated by Microsoft.

If you ever receive this kind of blackmail email, never pay out any money under any circumstance. If you do, there’s a high risk that you’ll be flagged as a susceptible victim and repeatedly blackmailed for more and more money, again and again, until you’re broke.

Further reading: What is ransomware? What you need to know