MICROSOFT has issued a chilling warning to fans of Gmail and Outlook.
Security researchers at the US tech behemoth identified a large-scale scam operation targeting users of the popular email platforms.
The phishing campaign is targeting both individuals and organisations in an attempt to rob people of their hard-earned cash.
In a report published Tuesday, the researchers detaied how the scam, dubbed BulletProofLink by the team, fleeced unsuspecting victims.
BulletProofLink is a service is currently advertised on underground cybercrime forums.
For the price of $800, crooks can buy phishing kits, email templates, hosting, and automated services at a relatively low cost.
They can then use the tools to target victims around the world with phishing emails, which use social engineering to fool victims.
Phishing attacks commonly pose as a trusted company, such as your bank, in order to get money or private information from you.
- Read all the latest Phones & Gadgets news
- Keep up-to-date on Apple stories
- Get the latest on Facebook, WhatsApp and Instagram
“With over 100 available phishing templates that mimic known brands and services, the BulletProofLink operation is responsible for many of the phishing campaigns that impact enterprises today,” Microsoft said.
“BulletProofLink is used by multiple attacker groups in either one-off or monthly subscription-based business models, creating a steady revenue stream for its operators.”
Once a payign customer has registered, BulletProofLink operators handle everything else for them, Microsoft said.
Services include setting up a web page to host the phishing site, sending the phishing emails to desired victims and collecting credentials from attacks.
Many of the attacks involved stealing logins to other website and services. These can then be sold on the dark web.
It’s thought that BulletProofLink has over 1,600 members, “all potential buyers of the stolen passwords and phishing services.”
Microsoft published the findings to warn the wider security community of the existence of the group.
“As part of our commitment to improve protection for all, we are sharing these findings so the broader community can build on them and use them to enhance email filtering rules as well as threat detection technologies like sandboxes to better catch these threats,” the company said.
Best Phone and Gadget tips and hacks
Looking for tips and hacks for your phone? Want to find those secret features within social media apps? We have you covered…
- How to get your deleted Instagram photos back
- How to track someone on Google Maps
- How can I increase my Snapchat score?
- How can I change my Facebook password?
- How can I do a duet on TikTok?
- Here’s how to see if your Gmail has been hacked
- How can I change my Amazon Alexa voice in seconds?
- What is dating app Bumble?
- How can I test my broadband internet speed?
- Here’s how to find your Sky TV remote in SECONDS
In other news, a Google Maps fan has spotted a “secret” military base tucked away in the middle of the Sahara desert.
Samsung has teased a glimpse of the design for its highly anticipated Galaxy Z Fold 3 smartphone.
And, the next iPhone will come in a new pink colour and start at just under £800, according to recent rumours.
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]