Hackers are tricking company leaders to steal Microsoft 365 accounts and demand money
Scammers are calling people while pretending to be IT support so they can trick them into giving access to work accounts, especially Microsoft 365. Their goal is to steal company information and then demand payment or threaten to release what they took.
Who is at risk
Company leaders, managers, and employees who use Microsoft 365 or other cloud-based work accounts are most at risk, especially if they may receive support calls about account problems.
What to watch for
Watch for unexpected phone calls, emails, or login requests claiming to be from IT support, especially if the caller pressures you to approve a sign-in, share a code, click a link, or act immediately.
What to do
Do not approve unexpected account requests or share codes over the phone; instead, hang up and contact your company’s IT team using a trusted internal number or official support channel.