National Cybersecurity Center
Advisory Alert

FBI Warns of Active Campaign Targeting Microsoft 365 Users

The FBI warns that a new scam service is being used to trick Microsoft 365 users into handing over their login details and to get around extra sign-in protection.


Who Is at Risk

Anyone who uses Microsoft 365, especially people at work or anyone who signs in with a password and extra verification.

What to Watch For

Watch for unexpected sign-in pages, emails asking you to log in again, or messages saying your account needs urgent attention.

What to Do

If you get a suspicious sign-in request, do not enter your password; go directly to the official Microsoft 365 site and change your password if anything looks wrong. Questions? Visit nationalcybersecuritycenter.org/personal-cyber-advisor to get step-by-step guidance.

Stay Protected

Sign up for free alerts and get connected to Merena, your personal cyber advisor, today.

By continuing, you agree to receive NCC email alerts and related guidance. Unsubscribe anytime. See our Privacy Policy.