“Sad announcement” email leads to tech support scam
ID: 63923df9-ab15-563a-ae95-9e461ec65c3c
STIX ID: report--63923df9-ab15-563a-ae95-9e461ec65c3c
Feed Name: Malwarebytes Blog
Threat Score
Tech-support scammers are sending impersonation emails titled "Sad announcement: <First Last>" containing short-lived NameCheap domains that redirect to Azure Blob Storage-hosted pages that display fake Windows Defender scan results to frighten victims into calling or paying for fraudulent support; the report documents subject and link patterns, sample domains, geographic targeting, and recommended avoidance and remediation steps.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
