Microsoft 365 Service Disruption: Staying Alert to Phishing & Cyber Threats

As Microsoft services begin to recover following the recent global disruption, we want to highlight the increased risk of phishing and social engineering attempts during this period.

Cybercriminals may look to take advantage of the disruption by sending fraudulent emails impersonating Microsoft, IT support teams or trusted service providers. These messages may ask you to resent you password, verify your account, re-register your MFA or take urgent action to restore access to services.

How can you stay protected?

We recommend reminding your employees to remain particularly vigilant over the coming days and to follow a few simple instructions:

• Be cautious of unexpected emails asking you to reset passwords, verify accounts or re-register MFA.
• Think before you click. Avoid clicking links or scanning QR codes in unsolicited emails claiming to relate to Microsoft’s service recovery.
• Never share your credentials. This includes passwords, MFA verification codes and other authentication details.
• Question urgent requests. Treat unexpected requests to change account credentials or security settings with caution.
  Report anything suspicious. If you receive an usual email or unexpected authentication request, report it to your IT or support team.

What should you be aware of?

At present, there is no indication that the Microsoft services disruption itself has resulted in customer accounts being compromised. However, periods of service disruption and recover can create opportunities for cybercriminals to exploit uncertainty and target users.

Our advice.

As services return to normal it’s important not to let your guard down. A little extra caution can go a long way in protecting your organisation, your employees and your data.

If something doesn’t look right, take a moment to check before taking action. If you’re unsure, speak to your IT support team.