{"id":265,"date":"2026-02-09T15:03:55","date_gmt":"2026-02-09T20:03:55","guid":{"rendered":"https:\/\/freshphish.info\/?p=265"},"modified":"2026-02-09T15:05:25","modified_gmt":"2026-02-09T20:05:25","slug":"toad-sent-through-microsoft","status":"publish","type":"post","link":"https:\/\/freshphish.info\/?p=265","title":{"rendered":"TOAD Sent Through Microsoft"},"content":{"rendered":"\n

Just an FYI about a new type of phish we\u2019ve seen over the past couple of months. I implemented a block specifically for this phish. The emails are sourced from Microsoft systems and they link to subdomains in the legitimate onmicrosoft.com domain. Note that even Microsoft appears to be aware of these emails based on the message at the top of the email. The links don\u2019t appear to be malicious per se. The emails are TOADs, providing a phone number to call for a refund scam. That said, I don\u2019t want these emails containing links to potentially dangerous sites in our users mailboxes.<\/p>\n\n\n\n

Microsoft “Invitations” are sent from “invites@microsoft.com”, which is a legitimate Microsoft service so we can’t just block all of these emails.<\/p>\n\n\n\n

\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

Just an FYI about a new type of phish we\u2019ve seen over the past couple of months. I implemented a<\/p>\n

Continue readingTOAD Sent Through Microsoft<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[12],"tags":[19,4,49],"class_list":["post-265","post","type-post","status-publish","format-standard","hentry","category-phish","tag-microsoft","tag-phish","tag-toad"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t