Attack Details

Attack Date:

May 6, 2022

Microsoft Subscription Renewal Fake Billing Scam

Initial Email Content

Subject

Your Office 365 has been renewed.

Body

Dear Pam

HELPDESK: 1-888-314-2079

BILLING DATE: May/06/2022

INVOICE ID: PP38165246

PAYMENT MODE AUTO DEBITED: ACCOUNT / CARD

Thanks for choosing Office 365 Suite. Kindly find the renewal details for Microsoft Office 365 and Online OneDrive renewal.

License Period: May/06/2022 – May/05/2023

Description

‍

Microsoft Office 365 (5 Devices)

Items

Rate

Qty

Amount

Microsoft Office 365 License

$149.99

OneDrive Cloud Storage (1 TB)

$124.99

Subtotal

$274.98

Tax (9%)

$24.75

Total

Paid Amount
‍

$299.73

‍

$299.73

Your license is activated. It will take some time for this transaction to show up in your account. If you do not wish to renew or pay $299.73, please follow the steps below to cancel your Subscriptions/Plan.

Call us on 1-888-314-2079 (Toll free) and speak to an advisor for the refund.

Thank You,

Customer Care

Helpline Number: 1-888-314-2079

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based fake billing scam impersonates Microsoft using a subscription renewal theme.

Analysis Overview

Type

Fake Billing Scam

Tactic

No items found.

Goal

Impersonated Party

Vector

Text-based

Theme

Subscription Renewal

Language