

To summarize, by trusting the "New app(s) have access to your Microsoft Account" scam emails, users can experience severe privacy issues, financial losses, and even identity theft. Finance-related accounts (e.g., banking, online money transferring, e-commerce, digital wallets, etc.) can be used to make fraudulent transactions and/or online purchases. Should compromising or especially sensitive content be found on data-storage platforms/services - it may be held for ransom under the threat of publication. These accounts can also be used to spread malware by sharing infectious files or links to malicious websites. To elaborate on how scammers can abuse stolen accounts - by pretending to be the communication platform's (e.g., email, social media, social networking, messenger, etc.) genuine owners - they can ask the contacts/friends for loans. Therefore, emails can serve as a gateway to other accounts. Emails are of particular interest to scammers - as they are typically connected to other platforms and services (e.g., they are registered through the emails). This can occur due to the inadvisable yet common practice of using the same passwords for multiple accounts. Regardless, by gaining control over one account - scammers may be able to access others as well. However, the phishing site is not disguised as the actual Microsoft account sign-in page, nor does it specify with what account's log-in credentials (usernames/passwords) users have to sign in. It is likely that these scam emails target recipients' Microsoft accounts. Therefore, by attempting to log in through this webpage, users will inadvertently allow scammers access to their accounts. When the " Login Here to Manage your apps" button is clicked, it opens the promoted phishing website.Īs mentioned in the introduction, this fake sign-in page operates by recording the information entered into it. The recipient is instructed to remove these apps if they did not grant them access to the account. The letters then specify that " Gmail Android" has connected to the Microsoft account in question. The "New app(s) have access to your Microsoft Account" scam emails inform the recipient that previously unconnected applications have access to their data. This spam mail aims to promote a phishing website designed to steal account log-in credentials.

It must be emphasized that these email letters are in no way associated with the Microsoft Corporation. The scam emails also state these apps have access to users' data. The letters distributed through this campaign - claim that new applications have connected to recipients' Microsoft accounts. "New app(s) have access to your Microsoft Account email scam" refers to a spam campaign - a large-scale operation during which thousands of deceptive emails are sent. What is the "New app(s) have access to your Microsoft Account" scam email?
